# gitleaks

**Licence:** MIT | **Language:** Go | **Source:** https://github.com/gitleaks/gitleaks

## Role

Secret scanning

## Why it's here

Scans repositories and history for hardcoded secrets - catches the key someone committed by accident, before it is public.

## Running it

CLI tool with no server component. Install it from the fetched source and run it in CI.

```bash
./fetch-sources.sh ./sources
tar xzf ./sources/gitleaks.tar.gz -C ./sources
```