Protect and discover secrets using Gitleaks 🔑

Secrets Patterns DB: The largest open-source Database for detecting secrets, API keys, passwords, tokens, and more.

Secret and/or credential patterns used for gf.

Pillage filesystems for sensitive information with Go 🔍

convert secret patterns to gf compatible.

This is an extension for Azure DevOps that is a wrapper arround gitleaks created by Zachary Rice for easy execution inside your pipeline. Gitleaks is a SAST tool for detecting hardcoded secrets like passwords, api keys, and tokens in git repos. Gitleaks is an easy-to-use, all-in-one solution for finding secrets, past or present, in your code.

This GitHub Action allows you to run Gitleaks in your GitHub workflow.

A gitleaks config that has most of Microsoft's deprecated credscan rules ported to it.

A toolbox to help developers and open source referents to not waste their time with manual and boring tasks. Provides simple and light tools to make investigations in source code to look for hot data. Provides also primitives to manage GitHub and GitLab organizations.

orgleaks is a tool to run gitleaks for an organization.

🚀 GitHub acrion for running zricethezav/gitleaks

A Python script that wraps the gitleaks tool to enable scanning of multiple repositories in parallel

✨ Azure DevOps Pipeline - Docker Build, Trivy Scan, Secret Detection, Sonar, Kubernetes Deploy and others Steps

This repo exposes api's which can be used to dig through git repositories of a github user / single repo to find leaked git credentials.

Repo for GitHub actions dockerfiles

This repository maintains a list of rules for finding secrets in a repository. These rules can be used for pre-commit hooks and post-commit repository scanning.

A Python based gitleaks wrapped tool to enable scanning of multiple Gitlab repositories in parallel.

Gitleaks customized to use across enterprises/multiple projects

AS{2} aims to provide visibility, compliance, alerting, and reporting capabilities. The primary focus is to integrate open-source tools used by AppSec teams in one place with better visibility.

Use Certificate Transparency Logs to find Jenkins and GitLab instances containing secrets