Skip to content

Gitleaks

gitleaks/gitleaks

A tool for detecting secrets like passwords, API keys, and tokens.

  • Active
  • MIT
  • Go
Gitleaks card: Detect secrets in your code.
30.9kGitHub stars
2.4kForks
210Contributors
v8.30.1latest release

In short

Gitleaks is a GitHub project in the Security category, written mainly in Go. It is released under the MIT licence (permissive). Maintenance status: active, last commit 28 Oct 2026. It has 30,900 GitHub stars.

What it does

Standout capabilityDetects secrets in git repos, files, and stdin
Best forDevelopers scanning code for secrets

Maintenance

14 dsince last commit
235 dsince last release
538open issues
8 yrproject age
commitrelease
12 months agotoday

Active Commits in the last 30 days. Last commit: 28 Oct 2026 · Latest release: v8.30.1 · 21 Mar 2026. How we score this

Licence in plain words

Permissive · MIT

Use, copy, modify and sell it, including in closed-source products. Keep the copyright and licence notice.

A summary, not legal advice. Read the project's LICENSE file before relying on it. SPDX ↗

Gitleaks compared with alternatives

ProjectStarsLicenceStatusLast commit
Vaultwarden70.6kAGPL-3.0Active4 Nov 2026
Trivy39.2kApache-2.0Active11 Nov 2026
Web-Check35.5kMITActive5 Nov 2026
Gitleaks (this page)30.9kMITActive28 Oct 2026
MyPII—MITActive6 Nov 2026

Same category, sorted by GitHub stars. Numbers checked 11 Nov 2026.

Questions

Is Gitleaks free and open source?

Yes. Gitleaks is published on GitHub under the MIT licence (permissive). Use, copy, modify and sell it, including in closed-source products. Keep the copyright and licence notice.

Is Gitleaks still maintained?

Active: the last commit was on 28 Oct 2026 and the latest release, v8.30.1, came out on 21 Mar 2026. Repoworthy rechecks this daily.

What is Gitleaks written in?

Gitleaks is mainly written in Go.

How popular is Gitleaks?

As of 11 Nov 2026, Gitleaks has 30,900 GitHub stars, 2,363 forks and 210 contributors.

What are some alternatives to Gitleaks?

Other Security projects on Repoworthy include Trivy, Web-Check, Vaultwarden and MyPII.

Alternatives in Security

Security →

Trivy

aquasecurity/trivy

Active

A security scanner for vulnerabilities, misconfigurations, secrets, and SBOM.

★ 39.2kApache-2.0Go

Web-Check

lissy93/web-check

Active

An all-in-one OSINT tool for analysing any website.

★ 35.5kMITTypeScript

Vaultwarden

dani-garcia/vaultwarden

Active

An alternative server implementation of the Bitwarden Client API, written in Rust.

★ 70.6kAGPL-3.0Rust

MyPII

sasateguh/mypii

Active

A set of Malaysian PII recognizers for Presidio.

MITPythonSasa Teguh

Numbers from the GitHub API, checked 11 Nov 2026. Text summarised from the project's README. Spotted something wrong? Tell us.