A security scanner for vulnerabilities, misconfigurations, secrets, and SBOM.

Gitleaks
gitleaks/gitleaks
A tool for detecting secrets like passwords, API keys, and tokens.
- Active
- MIT
- Go

In short
Gitleaks is a GitHub project in the Security category, written mainly in Go. It is released under the MIT licence (permissive). Maintenance status: active, last commit 28 Oct 2026. It has 30,900 GitHub stars.
What it does
Maintenance
Active Commits in the last 30 days. Last commit: 28 Oct 2026 · Latest release: v8.30.1 · 21 Mar 2026. How we score this
Licence in plain words
Use, copy, modify and sell it, including in closed-source products. Keep the copyright and licence notice.
A summary, not legal advice. Read the project's LICENSE file before relying on it. SPDX ↗
Gitleaks compared with alternatives
| Project | Stars | Licence | Status | Last commit |
|---|---|---|---|---|
| Vaultwarden | 70.6k | AGPL-3.0 | Active | 4 Nov 2026 |
| Trivy | 39.2k | Apache-2.0 | Active | 11 Nov 2026 |
| Web-Check | 35.5k | MIT | Active | 5 Nov 2026 |
| Gitleaks (this page) | 30.9k | MIT | Active | 28 Oct 2026 |
| MyPII | — | MIT | Active | 6 Nov 2026 |
Same category, sorted by GitHub stars. Numbers checked 11 Nov 2026.
Questions
Is Gitleaks free and open source?
Yes. Gitleaks is published on GitHub under the MIT licence (permissive). Use, copy, modify and sell it, including in closed-source products. Keep the copyright and licence notice.
Is Gitleaks still maintained?
Active: the last commit was on 28 Oct 2026 and the latest release, v8.30.1, came out on 21 Mar 2026. Repoworthy rechecks this daily.
What is Gitleaks written in?
Gitleaks is mainly written in Go.
How popular is Gitleaks?
As of 11 Nov 2026, Gitleaks has 30,900 GitHub stars, 2,363 forks and 210 contributors.
What are some alternatives to Gitleaks?
Other Security projects on Repoworthy include Trivy, Web-Check, Vaultwarden and MyPII.
Alternatives in Security
Security →An all-in-one OSINT tool for analysing any website.
An alternative server implementation of the Bitwarden Client API, written in Rust.
A set of Malaysian PII recognizers for Presidio.
Numbers from the GitHub API, checked 11 Nov 2026. Text summarised from the project's README. Spotted something wrong? Tell us.