# Gitleaks Git Repository Secret Scanner > Gitleaks is an open-source SAST tool for detecting hardcoded secrets like passwords, API keys, and tokens in Git repositories, files, and directories. With 24,000+ GitHub stars and 20 million Docker downloads, it is the most widely adopted open-source secret scanner. Use when this capability is needed. - Skill: `tomevault-io/gitleaks-git-repository-secret-scanner` (Agent Skill, multi-file: 2 files) - Install (CLI): `npx skillmds@latest add tomevault-io/gitleaks-git-repository-secret-scanner` - Raw SKILL.md: https://api.skillmd.com/api/skills/tomevault-io/gitleaks-git-repository-secret-scanner/raw - Safety review: pending (external: skill-scanner PASS, skillspector PASS) - Works with: Claude Code, Claude.ai, OpenAI Codex - Category: DevOps & Infra - Author: tomevault-io (https://skillmd.com/u/tomevault-io) - Updated: 2026-09-17 - Page: https://skillmd.com/skills/tomevault-io/gitleaks-git-repository-secret-scanner --- # Gitleaks Git Repository Secret Scanner Gitleaks is an open-source SAST tool for detecting hardcoded secrets like passwords, API keys, and tokens in Git repositories, files, and directories. With 24,000+ GitHub stars and 20 million Docker downloads, it is the most widely adopted open-source secret scanner. ## Installation Use the upstream install or setup path that matches your environment: - brew install gitleaks - docker pull zricethezav/gitleaks:latest - docker run -v ${path_to_host_folder_to_scan}:/path zricethezav/gitleaks:latest [COMMAND] [OPTIONS] [SOURCE_PATH] - docker pull ghcr.io/gitleaks/gitleaks:latest Requirements and caveats from upstream: - [dockerhub]: https://hub.docker.com/r/zricethezav/gitleaks - [dockerhub-badge]: https://img.shields.io/docker/pulls/zricethezav/gitleaks.svg - [![Docker Hub][dockerhub-badge]][dockerhub] Basic usage or getting-started notes: - ### Installing - bash - # MacOS - Source: https://github.com/gitleaks/gitleaks - Extracted from upstream docs: https://raw.githubusercontent.com/gitleaks/gitleaks/HEAD/README.md ## Source - [Agent Skill Exchange](https://agentskillexchange.com/skills/gitleaks-git-secret-scanner/) --- > Source: [agentskillexchange/skills](https://github.com/agentskillexchange/skills) — distributed by [TomeVault](https://tomevault.io).