opendevsecops/gitleaks repository overview

⁠Gitleaks

This docker container includes Zachary Rice Gitleaks⁠ with a few extras.

⁠Getting Started

This container is built automatically by Docker Hub. Simply pull to get latest build.

docker pull opendevsecops/gitleaks

Extensive documentation how to use this tool is available in the offical docs⁠. All command-line options can be supplied directly to the container entrypoint. For example to scan this repository use the following docker command:

docker run opendevsecops/gitleaks --repo=https://github.com/opendevsecops/docker-gitleaks

⁠Configs

This container comes with a number of configs to support various types of tasks.

⁠aws-enum.toml

This config looks for AWS-specific leaks to help identify AWS account ids and other types of data which can be used to enumerate AWS resources.

docker run opendevsecops/gitleaks --config=/run/configs/aws-enum.toml --github-org=target