Join us

ContentUpdates and recent posts about Gitleaks..
Discovery IconThat's all about @Gitleaks — explore more posts below...
 Activity
devopslinks
@devopslinks added a new tool Syft , 1 hour, 26 minutes ago.
 Activity
kaptain
@kaptain added a new tool KubeLinter , 1 hour, 29 minutes ago.
 Activity
bridgecrewio
@bridgecrewio started using tool checkov , 1 hour, 34 minutes ago.
 Activity
devopslinks
@devopslinks added a new tool Grype , 1 hour, 36 minutes ago.
 Activity
kaptain
@kaptain added a new tool Hadolint , 1 hour, 45 minutes ago.
 Activity
varbear
@varbear added a new tool Bandit , 1 hour, 48 minutes ago.
 Activity
devopslinks
@devopslinks added a new tool JFrog Xray , 1 hour, 51 minutes ago.
 Activity
devopslinks
@devopslinks added a new tool OWASP Dependency-Check , 1 hour, 55 minutes ago.
 Activity
varbear
@varbear added a new tool pre-commit , 1 hour, 58 minutes ago.
 Activity
devopslinks
@devopslinks added a new tool GitGuardian , 2 hours, 2 minutes ago.
Gitleaks is an open source SAST tool built to catch secrets before they leak into source control. It scans Git repositories, commits, and file systems for hardcoded secrets using a combination of regex rules and entropy checks. Developers use it in CI pipelines, pre-commit hooks, and security audits to prevent credential exposure. It is lightweight, easy to integrate, and widely adopted across engineering teams looking to strengthen their DevSecOps posture without slowing down delivery.