gitleaks
gitleaks, the secret scanner that runs before every commit.
gitleaks looks for keys, tokens and passwords in what you are about to commit. On the workstation it runs as a global pre-commit hook in every repository, so a secret is stopped before it reaches history, which is far cheaper than rotating it later.
On the workstation
-
Installed by the
gitleaksformula. -
A global hook chain runs it on staged changes, then hands over to the repository’s own hook, so pre-commit and git-lfs keep working.
Edit this page Last updated