TiloBox
Back to directory
Gitleaks project preview
Developer ToolsAlternative to GitHub Secret ScanningAlternative to TruffleHog EnterpriseAlternative to GitGuardian

Gitleaks

Fast, light-weight secret scanner for Git repositories, files, and directories.

View on GitHub Visit website
LicenseMIT
GitHub stars17.5k
Last commit1 weeks ago
Tags5 topics
Secret ScannerSecurityGit PrecommitCredential Leak DetectionGolang
Overview

Why consider Gitleaks?

Gitleaks is an open-source SAST tool designed to find and prevent secrets (passwords, API keys, AWS credentials, JWTs) in Git repositories. Written in Go, it runs as a pre-commit hook and CI action to block credentials leaks.

Guided learning

Learn Gitleaks by building

Practical setup notes, real use cases, and copy-ready examples in one focused guide.

1 min read 2 sections
In this guide2 sections

Overview of Gitleaks

Gitleaks audits full commit histories and pull requests using high-entropy regex patterns to intercept credential disclosures before pushing to remotes.

Quickstart

bash
1# Install Gitleaks
2brew install gitleaks
3
4# Audit current Git repository
5gitleaks detect --verbose

Gitleaks is licensed under the permissive MIT License.

Related tools

More options with a similar category or technology profile.

diskus logo

diskus

Minimal, fast alternative to du -sh written in Rust using multi-threaded directory traversal.

peco logo

peco

Simplistic interactive filtering tool for Unix pipelines, process lists, and file trees.

Dapr CLI logo

Dapr CLI

Command-line tool for managing Dapr distributed application runtime environments and sidecars.

Freeze logo

Freeze

Generate beautiful image screenshots and SVGs of code snippets and terminal outputs.

Gitleaks FAQs

Gitleaks is listed as a Developer Tools tool on TiloBox. Review the overview, features, and official documentation on this page to decide whether it solves your specific workflow.

Start with the project's GitHub repository and official website for supported installation and deployment instructions. Test the setup with representative data or a small project before rolling it out more widely.

Gitleaks is listed under the MIT license. Read the complete license text and the project's notices before using, modifying, or distributing the software.

Production readiness depends on your requirements. Review maintenance activity, security practices, documentation, backup and upgrade procedures, and compatibility with your stack; then validate it in a non-production environment.

Gitleaks is listed as an alternative to GitHub Secret Scanning. Compare the core workflow, deployment model, integrations, and licensing against your must-have requirements before switching.