This docker container includes Zachary Rice Gitleaks with a few extras.

This container is built automatically by Docker Hub. Simply pull to get latest build.

docker pull opendevsecops/gitleaks

Extensive documentation how to use this tool is available in the offical docs. All command-line options can be supplied directly to the container entrypoint. For example to scan this repository use the following docker command:

docker run opendevsecops/gitleaks --repo=https://github.com/opendevsecops/docker-gitleaks

This container comes with a number of configs to support various types of tasks.

This config looks for AWS-specific leaks to help identify AWS account ids and other types of data which can be used to enumerate AWS resources.

docker run opendevsecops/gitleaks --config=/run/configs/aws-enum.toml --github-org=target