References / Reference only
Gitleaks
Detect committed or working-tree secrets using configurable rules and allowlists.
Install with the upstream project
This entry is a reference. It has no apd init recipe in this catalog snapshot. Follow the upstream documentation for installation and configuration.
Integration notes
Install the CLI or official CI integration, select history/directory scan scope, and keep findings private. Review and rotate real leaked credentials; deleting a finding does not revoke a secret.