Gitleaks

Based on community signals so far, Gitleaks is an open-source static analysis tool for detecting and preventing hardcoded secrets like passwords, API keys, and tokens in Git repositories. It scans the entire commit history of a repository, including branches and tags, to find secrets that may have been accidentally committed. Gitleaks can be used as a CLI tool, a pre-commit hook, or integrated into CI/CD pipelines to automatically block commits containing secrets. It supports custom rules and regex patterns, making it flexible for different environments. The tool helps developers and security teams catch secrets early, reducing the risk of data breaches and credential exposure. Gitleaks is written in Go and is available on GitHub under an MIT license.

Gitleaks is trending due to increased awareness of supply chain security and credential leaks. Its GitHub repository has seen a spike in stars and contributions, likely from recent high-profile data breaches and the tool's inclusion in security best practices.