Gitleaks

Gitleaks is an open-source secrets detection tool that scans Git repositories, commit history, and staged changes for hardcoded credentials, API keys, and tokens. It uses regex-based rules to identify common secret patterns from hundreds of services and can be run as a pre-commit hook or CI check to prevent secrets from entering version control.

Gitleaks can also scan historical commits to identify previously committed secrets requiring rotation.