gitleaks

A SAST tool for detecting and preventing hardcoded secrets in git repos

Gitleaks is a SAST tool for detecting and preventing hardcoded secrets like passwords, API keys, and tokens in git repositories. It is an easy-to-use, all-in-one solution for finding secrets, past or present, in code, scanning git logs, files, directories, and stdin.

homepage ↗ github: gitleaks/gitleaks