Gitleaks
Detects secrets committed to a repository: API keys, tokens, passwords and private keys.
Why install it
Section titled “Why install it”A leaked credential is exploitable the moment it is pushed, whatever language the code is in. Gitleaks recognises hundreds of credential formats and high-entropy strings, so a review catches the secret before it reaches a public branch.
At a glance
Section titled “At a glance”| Finds | Secrets |
| Reads | Any language |
| Trust level | Safe on untrusted input |
| Official image | Included |
| Licence | MIT |
| Argus tool | run_gitleaks |
Install
Section titled “Install”The official Argus container image already ships Gitleaks. Anywhere else, install this binary on the daemon host:
gitleaks:brew install gitleaks
For other platforms, follow the official install guide. Argus looks for scanners once, when the daemon starts: restart it after installing, and argus doctor shows Gitleaks as installed.