Gitleaks
Secret scanner for Git repositories and source files
SecurityDevelopmentDevops
Gitleaks detects hardcoded secrets such as API keys, tokens, and passwords in repos and directories.
Mount sources under /scan (browse on port 8080) and run docker compose exec --entrypoint gitleaks gitleaks detect --source=/scan.