Home/Developer Tools/gitleaks

gitleaks

gitleaks/gitleaks

Find secrets with Gitleaks

GitHub Website

GraphCanon updated Sep 20, 2026 · GitHub synced Sep 20, 2026

54views this month

29k stars2.2k forksLast push Sep 9, 2026 Go MIT

Decision brief

Gitleaks is a Go-based tool for detecting secrets in code repositories, offering installation via Homebrew, Docker, and Go, and can be integrated as a pre-commit hook or GitHub action.

Good fit when

When you need a tool that can be integrated directly into your CI/CD pipeline as a GitHub action or pre-commit hook, enhancing security at the commit level.
If your team prefers tools written in Go, as Gitleaks is built with Go, which can offer performance benefits and cross-platform compatibility.

Avoid when

If your project strictly avoids Go-based tools due to specific team preferences or constraints, Gitleaks might not be the best fit.
When your organization has a preference for tools that are not open-source, as Gitleaks is distributed under the MIT license, which is open-source.

Observed Sep 18, 2026 · Source: enrich:decision_facts

gitleaks alternatives Trust report

Verify the decision

Maintenance and security

Full trust report

Maintenance: Active (9d since push); As of Sep 18, 2026
Provenance: Not a fork · Organization account; As of Sep 18, 2026
Security (OSV): 38 low (38 low); As of Sep 18, 2026

Public GitHub metadata and optional OSV scans. Signals, not a guarantee. Trust methodology.

Install

go get github.com/gitleaks/gitleaks

pkg.go.dev

How it fits your stack(5)

Typed graph edges - alternatives, integrations, successors, and dependencies. Ranked by relationship type, not raw GitHub stars.

langfuse

Langfuse is an open-source AI engineering platform for observability and metrics, whereas Gitleaks focuses on secret detection in git repositories. Both contribute to the overall security of AI development processes.

promptfoo

Both Gitleaks and Promptfoo focus on data security within AI applications, albeit in different capacities.

vector

Gitleaks secures codebases from leaks, while Vector deals with managing and securing observability data pipelines which can be part of the broader CI/CD process.

Similar tools

Same-category neighbours not already linked as typed edges.

awesome

😎 Awesome lists about all kinds of interesting topics

514k★

ECC

Agent harness performance optimization system for AI agents and LLMs

261k★

n8n

Fair-code workflow automation platform with native AI capabilities

205k★

Evidence and technical details

Sourced facts, taxonomy, compatibility claims, README excerpt, and machine-readable endpoints.

Overview

Gitleaks is a tool for detecting secrets in code repositories using various installation methods including Homebrew, Docker, and Go. It supports integration as a pre-commit hook or GitHub action.

Capability facts

Deploy: Self-host
Source: dockerfile:Dockerfile · Sep 18, 2026
Docker: Dockerfile present
Source: dockerfile:Dockerfile · Sep 18, 2026
Languages: go
Source: github.language · Sep 18, 2026

README

Getting Started Gitleaks can be installed using Homebrew, Docker, or Go. Gitleaks is also available in binary form for many popular platforms and OS types on the releases page. In addition, Gitleaks can be implemented as a pre commit hook directly in your repo or as a GitHub acti...

For agents

This page has a .md twin and JSON over the API.

/tools/gitleaks-gitleaks.md GET /api/graphcanon/tools/gitleaks-gitleaks GET /api/graphcanon/graph?tool=gitleaks-gitleaks