---
id: "gitleaks"
category: "detector"
url: "http://registry.apicrafter.io/tool/gitleaks"
---

# Gitleaks (`gitleaks`)

Open-source (MIT) secret scanner that finds hard-coded credentials, such as API keys, access tokens and private keys, in git history, directories and standard input. Its rules combine regular expressions with keywords and entropy checks. The list of supported types covers only the registry datatypes that match a gitleaks rule.

Website: <https://github.com/gitleaks/gitleaks>

## Supported datatypes (48)

- `age_secret_key`
- `anthropic_api_key`
- `atlassian_api_token`
- `aws_access_key_id`
- `cloudflare_origin_ca_key`
- `databricks_access_token`
- `digitalocean_token`
- `doppler_token`
- `dynatrace_token`
- `facebook_app_access_token`
- `github_fine_grained_pat`
- `github_token`
- `gitlab_pat`
- `google_api_key`
- `grafana_service_account_token`
- `hashicorp_vault_token`
- `heroku_oauth_token`
- `huggingface_access_token`
- `jfrog_api_key`
- `jfrog_reference_token`
- `jwt`
- `linear_api_key`
- `mailchimp_api_key`
- `new_relic_user_api_key`
- `npm_access_token`
- `onepassword_service_account_token`
- `openai_api_key`
- `pgp_private_key_block`
- `planetscale_password`
- `planetscale_token`
- `postman_api_key`
- `pulumi_access_token`
- `pypi_token`
- `rubygems_api_key`
- `sendgrid_api_key`
- `sendinblue_api_key`
- `sentry_auth_token`
- `shopify_access_token`
- `shopify_shared_secret`
- `slack_token`
- `slack_webhook_url`
- `sonarqube_token`
- `square_access_token`
- `stripe_api_key`
- `telegram_bot_token`
- `terraform_cloud_api_token`
- `twilio_api_key_sid`
- `x509_private_key`