$ man gitleaks

Gitleaks

Find secrets in your git history before someone else does.

fix at sourcepassive / local only

## why a developer should care

A secret deleted in a later commit is still in history - and public repos are one of the first OSINT sources attackers search.

$ brew install gitleaks

Other platforms and pre-built binaries: official install guide ↗

Check it worked: open a new terminal and run gitleaks version. "command not found" means it isn't installed or isn't on your PATH yet.

# Scan the whole history of this repo

$ gitleaks git -v .

# Scan only staged changes (pre-commit hook)

$ gitleaks git --pre-commit --staged -v