CmdID

CmdID / Commands

gitleaks

Detect secrets and API keys leaked in Git repositories. tldr-pages

On several platforms 1 Sigma rule name it

Opens CmdID with your command. It is read in your browser and sent nowhere.

Several platforms

from tldr-pages, CC BY 4.0

Scan a remote repository

gitleaks detect --repo-url https://github.com/username/repository.gitIdentify

Scan a local directory

gitleaks detect --source path/to/repositoryIdentify

Output scan results to a JSON file

gitleaks detect --source path/to/repository --report path/to/report.jsonIdentify

Use a custom rules file

gitleaks detect --source path/to/repository --config-path path/to/config.tomlIdentify

Start scanning from a specific commit

gitleaks detect --source path/to/repository --log-opts --since=commit_idIdentify

Scan uncommitted changes before a commit

gitleaks protect --stagedIdentify

Display verbose output indicating which parts were identified as leaks during the scan

gitleaks protect --staged --verboseIdentify

What detects it

Sigma process creation rules that name gitleaks
highScript Interpreter Spawning Credential Scanner - LinuxSwachchhanda Shrawan Poudel (Nextron Systems)