{"id":13649022,"url":"https://github.com/zricethezav/gitleaks-ci","last_synced_at":"2025-04-22T12:33:01.764Z","repository":{"id":107364592,"uuid":"133201221","full_name":"zricethezav/gitleaks-ci","owner":"zricethezav","description":"gitleaks, but for PRs","archived":true,"fork":false,"pushed_at":"2019-11-11T16:52:33.000Z","size":11,"stargazers_count":56,"open_issues_count":1,"forks_count":18,"subscribers_count":3,"default_branch":"master","last_synced_at":"2024-08-03T01:39:27.564Z","etag":null,"topics":["continuous-integration","security"],"latest_commit_sha":null,"homepage":null,"language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/zricethezav.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null}},"created_at":"2018-05-13T03:04:01.000Z","updated_at":"2024-04-12T08:53:30.000Z","dependencies_parsed_at":"2023-05-17T06:31:23.964Z","dependency_job_id":null,"html_url":"https://github.com/zricethezav/gitleaks-ci","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/zricethezav%2Fgitleaks-ci","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/zricethezav%2Fgitleaks-ci/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/zricethezav%2Fgitleaks-ci/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/zricethezav%2Fgitleaks-ci/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/zricethezav","download_url":"https://codeload.github.com/zricethezav/gitleaks-ci/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":223896472,"owners_count":17221441,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["continuous-integration","security"],"created_at":"2024-08-02T01:04:42.648Z","updated_at":"2024-11-09T23:30:48.835Z","avatar_url":"https://github.com/zricethezav.png","language":"Shell","funding_links":[],"categories":["Shell"],"sub_categories":[],"readme":"\u003cp align=\"center\"\u003e\n  \u003cimg alt=\"gitleaks-ci\" src=\"https://raw.githubusercontent.com/zricethezav/gifs/master/gitleaks-ci.png\" height=\"140\" /\u003e\n\u003c/p\u003e\n\n## Audit PRs on github before you hit that merge button\n### What is?\n[Gitleaks](https://github.com/zricethezav/gitleaks) is great for doing thorough audits on repos, organizations, and/or users but \nnot so great for hooking into CI pipelines. **Gitleaks-CI** is 50 lines of bash code that checks your PRs for secrets you probably shouldn't be commiting. Gitleaks-CI will do a simple regex check for each line of your PR diff. Fork this project if you want to add/remove regexes.\n\n### Alternatives?\nReview the PR like a good human.\n\n\n### How to?\nGitleaks-CI is a single line of code placed in whatever CI service you or your organization uses.\n```\nbash \u003c(curl -s https://raw.githubusercontent.com/zricethezav/gitleaks-ci/master/gitleaks.sh)\n```\n**You should fork this repo and use the `gitleaks.sh` script you own rather than assuming my trust.**\n\n#### PR logs\nSample PR with a leak [here](https://github.com/zricethezav/gitleaks-ci/pull/15)\n##### CircleCI\n\n\u003cp align=\"left\"\u003e\n  \u003cimg alt=\"gitleaks-ci\" src=\"https://raw.githubusercontent.com/zricethezav/gifs/master/circle_fail.png\" /\u003e\n\u003c/p\u003e\n\n##### Travis\n\n\u003cp align=\"left\"\u003e\n  \u003cimg alt=\"gitleaks-ci\" src=\"https://raw.githubusercontent.com/zricethezav/gifs/master/travis_fail.png\" height=\"240\" /\u003e\n\u003c/p\u003e\n\n\n---\n\n### Accessing Private Repos\nGitleaks-CI requires the owner's credentials to access private repos\n#### Travis\nIf you are using Travis read [this](https://docs.travis-ci.com/user/environment-variables/#Defining-encrypted-variables-in-.travis.yml) to add `GITHUB_USERNAME` and `GITHUB_API_TOKEN` environment variables.\n\n#### CircleCI\nTODO\n\n#### Jenkins\nTODO\n\n\n### If you find leaks in your PR\nPlease read the [Github article on removing sensitive data from a repository](https://help.github.com/articles/removing-sensitive-data-from-a-repository/) to remove the sensitive information from your history.\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fzricethezav%2Fgitleaks-ci","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fzricethezav%2Fgitleaks-ci","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fzricethezav%2Fgitleaks-ci/lists"}