{"slug": "gitleaks", "name": "Gitleaks", "category": "security", "category_name": "Security and passwords", "description": "", "recommenders": 3, "commenters": 7, "warners": 1, "score": 2.367, "rising": -0.98, "first": "2025-11-01", "latest": "2026-07-21", "why": "Gitleaks is a fine tool to use, I would recommend its use.", "why_is_quote": true, "has_verdict": false, "sentiment": {"recommend": 3, "neutral": 2, "compare": 2, "warn": 1}, "spark": [0, 1, 1, 0, 0, 0, 0, 0, 1, 0, 0, 0], "listed": true, "loved": [], "caveat": "", "short_quote": "Gitleaks is a fine tool to use, I would recommend its use.", "kind": "", "icon": true, "domain": null, "github_repo": "github.com/gitleaks/gitleaks", "official_url": "https://gitleaks.io/", "pricing": "", "aliases": ["Gitleaks", "gitleaks"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 783880384, "item_id": 48992524, "url": "https://news.ycombinator.com/item?id=48992524", "by": "toomuchtodo", "date": "2026-07-21", "stance": "recommend", "quote": "Gitleaks is a fine tool to use, I would recommend its use.", "excerpt": "Gitleaks is a fine tool to use, I would recommend its use.", "context": "", "use_case": "preventing secrets in commits", "switched_from": "", "story": "Ask HN: Best practice to prevent credentials/secrets commit to Git repo"}, {"id": 747823376, "item_id": 46738961, "url": "https://news.ycombinator.com/item?id=46738961", "by": "axismundi", "date": "2026-01-23", "stance": "recommend", "quote": "There's https://github.com/gitleaks/gitleaks", "excerpt": "There's https://github.com/gitleaks/gitleaks and https://github.com/mongodb/kingfisher", "context": "", "use_case": "Secret scanning", "switched_from": "", "story": "Radicle: The Sovereign Forge"}, {"id": 742621683, "item_id": 46413855, "url": "https://news.ycombinator.com/item?id=46413855", "by": "kirumachi", "date": "2025-12-28", "stance": "recommend", "quote": "They are great scanners", "excerpt": "Hi HN, I\u2019m one of the creators of Hokage. We built this because we were tired of the usuall spreadsheet hell that comes with running open-source security tools at any reasonable scale. If you are a small-to-mid-sized team, you likely use tools like Semgrep, Trivy, or Gitleaks. They are great scanners, but they all output different formats, don\u2019t talk to each other, and result in hundreds of duplicate findings that ma", "context": "", "use_case": "Secret scanning", "switched_from": "", "story": "Show HN: Hokage \u2013 Unified Orchestration for Semgrep, Trivy, and Zap"}]}], "caveats": [{"label": "", "summary": "", "quotes": [{"id": 769388385, "item_id": 48086774, "url": "https://news.ycombinator.com/item?id=48086774", "by": "zricethezav", "date": "2026-05-10", "stance": "warn", "quote": "It's the successor to Gitleaks since I'm not focused on that project much anymore.", "excerpt": "I've been working on Betterleaks for the past three months. It's the successor to Gitleaks since I'm not focused on that project much anymore. I just released v1.2.0 which added GitHub as a source to scan for secrets against and a new filtering system powered by CEL for more expressiveness. https://betterleaks.com", "context": "", "use_case": "", "switched_from": "", "story": "Ask HN: What Are You Working On? (May 2026)"}]}], "who": [], "tags": [], "use_cases": ["secret scanning", "preventing secrets in commits", "secrets detection benchmark"], "compared": [{"slug": "kingfisher", "name": "Kingfisher", "co": 2, "switched_from": 0, "switched_to": 0}], "makers": [], "threads": [{"url": "https://news.ycombinator.com/item?id=48942352", "title": "Ask HN: Best practice to prevent credentials/secrets commit to Git repo", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=48085993", "title": "Ask HN: What Are You Working On? (May 2026)", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=47303111", "title": "Ask HN: What Are You Working On? (March 2026)", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=46732213", "title": "Radicle: The Sovereign Forge", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=46447571", "title": "Claude Code Analytics \u2013 Turn AI Conversations into Actionable Insights", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=46413845", "title": "Show HN: Hokage \u2013 Unified Orchestration for Semgrep, Trivy, and Zap", "mentions": 1}], "sentiment_by_month": {"2025-11": {"compare": 2}, "2025-12": {"recommend": 1, "neutral": 1}, "2026-01": {"recommend": 1}, "2026-02": {}, "2026-03": {"neutral": 1}, "2026-04": {}, "2026-05": {"warn": 1}, "2026-06": {}, "2026-07": {"recommend": 1}, "2026-08": {}, "2026-09": {}, "2026-10": {}}, "quotes": [{"id": 783880384, "item_id": 48992524, "url": "https://news.ycombinator.com/item?id=48992524", "by": "toomuchtodo", "date": "2026-07-21", "stance": "recommend", "quote": "Gitleaks is a fine tool to use, I would recommend its use.", "excerpt": "Gitleaks is a fine tool to use, I would recommend its use.", "context": "", "use_case": "preventing secrets in commits", "switched_from": "", "story": "Ask HN: Best practice to prevent credentials/secrets commit to Git repo"}, {"id": 769388385, "item_id": 48086774, "url": "https://news.ycombinator.com/item?id=48086774", "by": "zricethezav", "date": "2026-05-10", "stance": "warn", "quote": "It's the successor to Gitleaks since I'm not focused on that project much anymore.", "excerpt": "I've been working on Betterleaks for the past three months. It's the successor to Gitleaks since I'm not focused on that project much anymore. I just released v1.2.0 which added GitHub as a source to scan for secrets against and a new filtering system powered by CEL for more expressiveness. https://betterleaks.com", "context": "", "use_case": "", "switched_from": "", "story": "Ask HN: What Are You Working On? (May 2026)"}, {"id": 756894929, "item_id": 47305933, "url": "https://news.ycombinator.com/item?id=47305933", "by": "davidcann", "date": "2026-03-09", "stance": "neutral", "quote": "Secrets filter via gitleaks", "excerpt": "Native macOS sandbox terminal: - UI for sandbox-exec to protect filesystem - Network sandbox per domain - Secrets filter via gitleaks - Vertical tabs option It's highly customizable. You generate native macOS app wrappers for each terminal app, each with its own rules and customizations. https://multitui.com", "context": "", "use_case": "secret scanning", "switched_from": "", "story": "Ask HN: What Are You Working On? (March 2026)"}, {"id": 747823376, "item_id": 46738961, "url": "https://news.ycombinator.com/item?id=46738961", "by": "axismundi", "date": "2026-01-23", "stance": "recommend", "quote": "There's https://github.com/gitleaks/gitleaks", "excerpt": "There's https://github.com/gitleaks/gitleaks and https://github.com/mongodb/kingfisher", "context": "", "use_case": "Secret scanning", "switched_from": "", "story": "Radicle: The Sovereign Forge"}, {"id": 743161157, "item_id": 46447572, "url": "https://news.ycombinator.com/item?id=46447572", "by": "skapadia", "date": "2025-12-31", "stance": "neutral", "quote": "built with Python, Streamlit, SQLite with FTS5, OpenRouter, and Gitleaks", "excerpt": "Hey HN! In 2025, I've spent more time than ever conversing with AI coding agents, particularly Claude Code. These conversations are an intimate look into how we think and solve problems. Every chat with the agent contains valuable solutions, patterns, decisions, and mistakes. So being able to search, analyze, and learn from those interactions isn't just convenient, it's becoming essential. To help me do this, I built", "context": "", "use_case": "", "switched_from": "", "story": "Claude Code Analytics \u2013 Turn AI Conversations into Actionable Insights"}, {"id": 742621683, "item_id": 46413855, "url": "https://news.ycombinator.com/item?id=46413855", "by": "kirumachi", "date": "2025-12-28", "stance": "recommend", "quote": "They are great scanners", "excerpt": "Hi HN, I\u2019m one of the creators of Hokage. We built this because we were tired of the usuall spreadsheet hell that comes with running open-source security tools at any reasonable scale. If you are a small-to-mid-sized team, you likely use tools like Semgrep, Trivy, or Gitleaks. They are great scanners, but they all output different formats, don\u2019t talk to each other, and result in hundreds of duplicate findings that ma", "context": "", "use_case": "Secret scanning", "switched_from": "", "story": "Show HN: Hokage \u2013 Unified Orchestration for Semgrep, Trivy, and Zap"}, {"id": 733033441, "item_id": 45814590, "url": "https://news.ycombinator.com/item?id=45814590", "by": "dolftax", "date": "2025-11-04", "stance": "compare", "quote": "comparing Gitleaks, detect-secrets and trufflehog", "excerpt": "Jai here, from Autofix Bot team. We've published results of the initial benchmark run[1] comparing Gitleaks, detect-secrets and trufflehog ~3 weeks ago. In the meantime, we've put together a significantly improved dataset, and we're planning to rerun those benchmarks shortly; will include Kingfisher to the list, and share the results here. Btw, we use Kingfisher's validation system internally for generating request/e", "context": "Autofix Bot team", "use_case": "secrets detection benchmark", "switched_from": "", "story": "Show HN: Narada \u2013 Open-source secrets classification model"}, {"id": 732603600, "item_id": 45787725, "url": "https://news.ycombinator.com/item?id=45787725", "by": "toomuchtodo", "date": "2025-11-01", "stance": "compare", "quote": "How does this compare to https://github.com/gitleaks/gitleaks ?", "excerpt": "How does this compare to https://github.com/gitleaks/gitleaks ?", "context": "", "use_case": "", "switched_from": "", "story": "Show HN: KeyLeak Detector \u2013 Scan websites for exposed API keys and secrets"}]}