{"data":{"slug":"gitleaks","name":"Gitleaks","tagline":"MIT secret scanner for git/dirs/stdin; CLI free, org Action needs free key","category":"devops","categoryName":"DevOps","url":"https://gitleaks.io","github":"https://github.com/gitleaks/gitleaks","pricing":"open-source","hook":"Gitleaks is the regex-first secrets detector when Trivy secrets are one of many scanners and you want git-history depth.","whatsGood":"MIT CLI. Scan git history, directories, stdin. Pre-commit hook + GitHub Action. Huge rule set for API keys/tokens. No SaaS seat tax on the binary. ~29k stars, battle-tested in CI.","theCatch":"LOUD: maintainer marks feature-complete (security patches; focus shifting to Betterleaks). Official Action for GitHub org repos needs a free license key from gitleaks.io — personal accounts exempt. Not a full ASVS/SAST suite. False positives need allowlists.","verdict":"MIT secrets CLI. Free forever; org Action wants free license key.","addedAt":"2026-09-04","featured":false,"domain":"DevOps","subSpecialty":"Security","capabilities":["secrets","ci","git"],"surfaces":["CLI","Self-host","Hosted"],"ecosystem":["Multi-platform","Go"],"licenseModel":"OSS/MIT","githubStars":29100},"related":[{"slug":"github-actions","name":"GitHub Actions","tagline":"CI/CD that lives where your code does"},{"slug":"docker","name":"Docker","tagline":"Container runtime that changed deployment"},{"slug":"kubernetes","name":"Kubernetes","tagline":"Container orchestration at scale"},{"slug":"terraform","name":"Terraform","tagline":"Infrastructure as code that actually works"},{"slug":"pulumi","name":"Pulumi","tagline":"Infrastructure as code in real languages"}],"links":{"self":"/api/gems/gitleaks","html":"/gems/gitleaks","markdown":"/gems/gitleaks.md","category":"/api/gems?category=devops","categoryPage":"/stacks/devops"}}