Skip to main content
Gitleaks is a secret-scanner.

​
Files

Gitleaks will run on all files.

​
Configuration

Gitleaks supports the following config files:
  • gitleaks.toml

​
When we skip Gitleaks

CodeRabbit will skip running Gitleaks when:
  • Gitleaks is already running in GitHub workflows.

​
Notes

  • Gitleaks runs on all files in the pull request (not just specific file types).
  • Gitleaks uses --no-git flag, so it scans files directly rather than scanning git history.