Home / gitleaks / gitleaks
Repository Analysis

gitleaks/gitleaks

Find secrets with Gitleaks 🔑

2.3 Likely human-written View on GitHub
2.3
Adjusted Score
2.3
Raw Score
100%
Time Factor
2026-05-21
Last Push
27,397
Stars
Go
Language
27,302
Lines of Code
295
Files
50
Pattern Hits
2026-05-31
Scan Date

Score History

Severity Breakdown

CRITICAL 0HIGH 3MEDIUM 0LOW 47

Pattern Findings

50 matches across 4 categories. Click a row to expand file-level details.

Fake / Example Data24 hits · 24 pts
SeverityFileLineSnippet
LOWdetect/detect_test.go955 Email: "user@example.com",
LOWdetect/detect_test.go976 Email: "user@example.com",
LOWdetect/detect_test.go997 Email: "user@example.com",
LOWdetect/detect_test.go1018 Email: "user@example.com",
LOWdetect/detect_test.go1039 Email: "user@example.com",
LOWdetect/detect_test.go1060 Email: "user@example.com",
LOWdetect/detect_test.go1081 Email: "user@example.com",
LOWdetect/detect_test.go1102 Email: "user@example.com",
LOWdetect/detect_test.go1123 Email: "user@example.com",
LOWdetect/detect_test.go1144 Email: "user@example.com",
LOWdetect/detect_test.go1165 Email: "user@example.com",
LOWdetect/detect_test.go1186 Email: "user@example.com",
LOWdetect/detect_test.go1207 Email: "user@example.com",
LOWdetect/detect_test.go1228 Email: "user@example.com",
LOWdetect/detect_test.go1249 Email: "user@example.com",
LOWdetect/detect_test.go1270 Email: "user@example.com",
LOWtestdata/expected/report/json_simple.json15 "Author": "John Doe",
LOWtestdata/expected/report/template_jsonextra.json15 "Author": "John Doe",
LOWreport/template_test.go36 Author: "John Doe",
LOWreport/template_test.go61 Author: "John Doe",
LOWreport/json_test.go25 Author: "John Doe",
LOWreport/junit_test.go36 Author: "John Doe",
LOWreport/csv_test.go35 Author: "John Doe",
LOWreport/sarif_test.go40 Author: "John Doe",
Over-Commented Block22 hits · 22 pts
SeverityFileLineSnippet
LOWREADME.md241
LOWREADME.md261# appended and can contain duplicates.
LOWdetect/detect_test.go61secret=6465636F6465642D7365637265742D76616C756576484558
LOWdetect/reader.go41// StreamDetectReader streams the detection results from the provided io.Reader.
LOWdetect/reader.go61// findingsCh, errCh := detector.StreamDetectReader(myReader, 64) // using 64 KB buffer size
LOWcmd/detect.go1// The `detect` and `protect` command is now deprecated. Here are some equivalent commands
LOWcmd/generate/config/utils/generate.go121 // TODO: "php - null coalesce": `${i}Token ??= "{s}"`,
LOWcmd/generate/config/rules/curl.go121 // Short flag.
LOWcmd/generate/config/rules/1password.go41 return utils.Validate(r, tps, fps)
LOWcmd/generate/config/rules/sentry.go21 },
LOWcmd/generate/config/base/config.go41 // ----------- Interpolated Variables -----------
LOWconfig/gitleaks.toml1# This file has been auto-generated. Do not edit manually.
LOWconfig/allowlist.go41
LOWscripts/profile.sh1#! /usr/bin/env bash
LOWsources/git_test.go1package sources
LOWsources/git_test.go21// source: filepath.Join(repoBasePath, "small"),
LOWsources/git_test.go41// }
LOWsources/git_test.go61// t.Error("expected: ", expected, "got: ", diffSb.String())
LOWsources/git_test.go81// err := moveDotGit("dotGit", ".git")
LOWsources/git_test.go101
LOWsources/git_test.go121
LOWsources/git_test.go141// os.RemoveAll(fmt.Sprintf("%s/%s/%s", repoBasePath, dir.Name(), ".git"))
Cross-File Repetition3 hits · 15 pts
SeverityFileLineSnippet
HIGHtestdata/config/valid/rule_entropy_group.toml0(?i)(discord[a-z0-9_ .\-,]{0,25})(=|>|:=|\|\|:|<=|=>|:).{0,5}['\"]([a-h0-9]{64})['\"]
HIGHtestdata/config/invalid/rule_bad_entropy_group.toml0(?i)(discord[a-z0-9_ .\-,]{0,25})(=|>|:=|\|\|:|<=|=>|:).{0,5}['\"]([a-h0-9]{64})['\"]
HIGHtestdata/config/invalid/rule_missing_id.toml0(?i)(discord[a-z0-9_ .\-,]{0,25})(=|>|:=|\|\|:|<=|=>|:).{0,5}['\"]([a-h0-9]{64})['\"]
Hyper-Verbose Identifiers1 hit · 1 pts
SeverityFileLineSnippet
LOWcmd/generate/config/rules/huggingface.go105 `def test_internal_api_org_inclusion_with_href(api_name, href, expected, monkeypatch, called_with):