🔍 GitHub Leaks Scanner

Multi-tool secret scanner powered by Leakos

🔒 Login required

Please create an account for free and login to use this tool.

🎯 Scan Target

Select Target Type:

GitHub Organization

GitHub User

Repository URL

Repository URL:

Enter the full GitHub repository URL to scan

GitHub Token Optional

Personal access token to access private repos (if you are scanning a public repo you don't need this)

🛠️ Scanning Tools

Select tools to use for scanning:

Gitleaks 🔗

TruffleHog 🔗

Rex 🔗

NoseyParker 🔗

GGShield 🔗

Kingfisher 🔗

All tools are selected by default. Deselect to exclude from scan.

Only verified secrets (TruffleHog only)

Get only secrets that have been verified by TruffleHog

Include forked repositories

Scan forked repositories (disabled by default)

Rex: Use all regexes

Allow Rex to use all regexes (more findings, but noisier)

Avoid Secret Sources (comma-separated):

Exclude specific secret types from results

Max Secret Length:

Maximum length of valid secrets in characters

Tools Timeout (seconds):

Timeout for each scanning tool execution

I confirm that I have authorization to scan the specified repository/organization/user and have read and agree to the Terms of Service. I understand that unauthorized scanning may violate GitHub's terms and applicable laws, and I am solely responsible for ensuring proper authorization.

⏳ Scanning in progress...

This operation can take 5-10 minutes depending on repository size.

⚠️ DO NOT close this window or navigate away!

The Lambda function will timeout after 14 minutes if scanning takes too long.

🔍 GitHub Leaks Scanner

🔒 Login required

🎯 Scan Target

🛠️ Scanning Tools

Scan Results