
Containerized secret scanning tool that detects exposed credentials, API keys, and tokens in Git repositories using regex and entropy-based detection, designed for local workflows and CI/CD pipelines.
Opinionated gitleaks build for secret scanning in local workflows and pipelines.
podman pull registry.gitlab.com/niclas-zone/ctr/gitleaks:latest
podman run --rm \
-v $(pwd):/repo \
-w /repo \
registry.gitlab.com/niclas-zone/ctr/gitleaks:latest \
detect --source . --verbose
secret-detection:
image: registry.gitlab.com/niclas-zone/ctr/gitleaks:latest
script:
- gitleaks detect --source . --verbose
Niclas Heinz
Contributions are welcome! Please open an issue or submit a merge request if you have suggestions or improvements.
This project is licensed under the MIT License. See LICENSE for details.