# gitleaks
> Detect and prevent hardcoded secrets in git repos

## Summary
SAST tool for detecting hardcoded secrets like passwords, API keys, and tokens in git repositories

## Capabilities
- Scan git repositories for hardcoded secrets
- Detect passwords, API keys, and tokens
- Scan entire git history or individual commits
- Integrate into CI/CD pipelines as a pre-commit hook
- Support custom rules via configuration

## When to Use
- When you need to audit a repository for leaked secrets
- When setting up pre-commit hooks to prevent secret leaks
- When running security scans in CI/CD pipelines

---
Source: https://littlescripts.sh/tools/gitleaks
