betterleaks/betterleaks

Health v2 · maintenance only

Adoption not part of the score

1792 stars · 131 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Betterleaks is a fast, configurable secrets scanner for finding leaked credentials in git repositories, filesystems, and platforms like GitHub, GitLab, Hugging Face, and S3. Built by the Gitleaks maintainers, it adds Expr-based contextual filtering, live secret validation, and token-efficiency filtering to reduce false positives.

Use cases

• scan a git repo for leaked api keys
• find exposed credentials in a github organization
• detect secrets in ci pipelines
• check if leaked credentials are still active
• scan a directory for hardcoded passwords
• reduce false positives in secrets scanning
• scan gitlab projects for leaked tokens

When to choose

• you need a fast, portable secrets scanner with low false positives
• you want to scan sources beyond git like GitHub, GitLab, Hugging Face, or S3
• you need to validate whether detected secrets are still live
• you want configurable contextual filtering beyond regex and entropy

When to avoid

• you need a GUI-based security dashboard rather than a CLI tool
• you need full SAST beyond secrets detection
• you require long-term stable tooling and prefer the more established Gitleaks ecosystem

Facets

cli-tool · maturity active

security secrets-management vulnerability-scanning cli developer-tools security developer-tools version-control windows cli go secrets-scanning gitleaks-successor sast credential-detection devsecops static-analysis ci-cd devops linux macos docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="betterleaks/betterleaks")