secret-scanning
Detect leaked secrets in source code
Synopsis
Scan a repository or directory for accidentally committed secrets and produce a SARIF report.
This command runs the configured secret-scanning tool (gitleaks) and uploads the SARIF results to DevGuard for analysis and issue creation. The command signs the request using the configured token before uploading the SARIF results.
You may pass the target as the first positional argument instead of using --path.
Any flags after a "--" separator are forwarded verbatim to the underlying gitleaks invocation. See the gitleaks CLI reference for available flags: https://github.com/gitleaks/gitleaks#usage