Get Started

Gitleaks

Scans your code and its whole Git history for API keys, tokens and passwords, and can block a commit that contains one.

What you can do with it

  • Find keys you thought you deleted, still sitting in old commits
  • Block a commit that has a key or password in it
  • Make a redacted report of every leak to work through
Worth knowingIt matches known key formats and random-looking values, so it can miss short human-made passwords (like hunter2) and passwords inside database links. 'No leaks found' is not proof you're clean.