Gitleaks on Ubuntu 24.04 LTS

Gitleaks is the widely used open source scanner for hardcoded secrets. It reads your source code, configuration files and git commit history and reports every hardcoded API key, cloud access key, token, password and private key it finds, using an embedded ruleset of more than 160 detection rules that recognise the credential formats of the major cloud and SaaS providers. This cloudimg image runs Gitleaks 8.30.1 on Ubuntu 24.04 LTS.

It works in two complementary modes. The git mode walks the entire commit history of a repository, so a secret that was committed once and later deleted is still caught, which a working tree scan misses. The directory mode scans plain files and working trees. Every finding names the rule, the file, the line and the offending value, and results can be written as JSON or SARIF, the format that GitHub code scanning, Azure DevOps and most IDEs consume directly, so a scan drops straight into a code review, a dashboard or a pipeline gate.

The detection rules are compiled into the scanner, so scanning needs no outbound internet at all and this VM runs happily in an isolated subnet with no egress. The image ships git preinstalled so history scanning works out of the box, a daily timer scans a directory you choose and writes JSON and SARIF reports with stable latest symlinks for CI pickup, and read only self test fixtures let you prove detection works on your own VM. This is a headless command line product: no web UI, no listening service, no admin account and no password, so SSH on port 22 is the only open port.

Gitleaks is distributed under the MIT License, free and open source with no per CPU or per deployment fee. cloudimg is not affiliated with or endorsed by the Gitleaks project or Zachary Rice. cloudimg provides packaging, secure by default hardening, security patching, and 24/7 support with a guaranteed 24 hour response SLA.