Betterleaks

Betterleaks detects passwords, API keys, tokens and other secrets in the
history of Git repositories, in directories and files, in text read from
standard input, and in GitHub, GitLab, Hugging Face and S3 sources. It can
check findings against live APIs, reads Gitleaks configuration files, and
writes reports as JSON, CSV, JUnit, SARIF or a custom template.

Examples

betterleaks git -v ~/projects/my-project

betterleaks dir -v ~/projects/my-project

cat notes.txt | betterleaks stdin

betterleaks github https://github.com/my-org --validation

File access

Betterleaks can scan repositories and files in your home directory. To
also scan USB drives and other removable media (/media, /mnt), run:

sudo snap connect betterleaks:removable-media

The snap includes Git for scanning history and cloning over HTTPS.