Secret Detection with Gitleaks

Scan the repository for hardcoded secrets, API keys, tokens, and credentials using gitleaks patterns.

What To Do

1. Check if gitleaks is installed:

   • Run: gitleaks version or install via choco install gitleaks / brew install gitleaks
   • Alternative: Use regex patterns manually if gitleaks CLI not available

2. Run full repository scan:

   gitleaks detect --source=. --report-format=json --report-path=gitleaks-report.json
   

3. Run pre-commit scan (staged files only):

   gitleaks protect --staged --report-format=json