# 🔐 Gitleaks: Detect Secrets Before They Reach Git

Gitleaks is an open-source tool designed to scan source code and Git history for potentially exposed sensitive information such as API keys, database passwords, and access tokens. By detecting secrets early in the development process, Gitleaks helps teams prevent security incidents before they occur. Gitleaks focuses on exposing secrets rather than identifying vulnerabilities like SQL injection or outdated dependencies.

The tool works by scanning repositories and files, reporting potential findings, and enabling developers to investigate and remediate genuine exposure. In CI/CD pipelines, Gitleaks can fail the pipeline if a secret is detected, ensuring that sensitive information is not accidentally committed or deployed.

To install Gitleaks on Ubuntu, download the appropriate Linux archive from the official releases page, extract it, and install the binary. Verify the installation with the `gitleaks version` command. After installation, developers can scan their Git repositories or individual files to identify potential secrets. The tool can also be integrated into a GitLab CI/CD pipeline, running during the security stage and failing the pipeline if a secret is detected.

While Gitleaks offers several advantages such as being open-source, easy CI/CD integration, and Git history scanning, it also has some limitations including potential false positives, false negatives, and the fact that it is not a secrets manager but rather a tool for detecting potential secret exposures.