{
  "slug": "gitleaks",
  "name": "Gitleaks",
  "url": "https://github.com/gitleaks/gitleaks",
  "cat": "review",
  "group": "ship",
  "tagline": "Secret scanning in git history",
  "price": "$0 forever, MIT open source; the official GitHub Action needs a free license key for organisation-owned repos, none for personal accounts",
  "tier": "free",
  "pick": false,
  "what": "Scans git repositories, loose files and stdin for passwords, API keys and tokens. It walks full commit history using <code>git log -p</code>, so it finds credentials in old commits that were later deleted from the working tree. Runs as a CLI, pre-commit hook, Docker image or GitHub Action.",
  "why": "The highest-value five-minute install on this list. An assistant pasting a live <code>OPENAI_API_KEY</code> or database URL into a committed config file is routine, and once pushed only history rewriting removes it.",
  "warn": "Entropy-based detection false-positives on hashes, lockfiles and test fixtures, so budget time for a <code>.gitleaksignore</code> baseline. The maintainer has declared it feature complete, security patches only.",
  "install": "brew install gitleaks && gitleaks detect --source .",
  "category": {
    "key": "review",
    "name": "Code review, testing & security",
    "desc": "The single biggest risk in vibe coding is shipping AI code nobody read. This is the fix.",
    "group": "ship",
    "groupName": "Ship it & keep it alive"
  },
  "freshness": null,
  "health": {
    "ok": true,
    "status_code": 200,
    "final_url": null,
    "checked_at": "2026-08-19T00:17:14.278+00:00"
  },
  "corrected_at": null,
  "upstream_changed_at": null
}