Gitleaks is a SAST tool for detecting hardcoded secrets like passwords, api keys, and tokens in git repos. Gitleaks aims to be the easy-to-use, all-in-one solution for finding secrets, past or present, in your code.
Features:

• Scan for commited secrets
• Scan for unstaged secrets as part of shifting security left
• Scan directories and files
  *Available Github Action
• Custom rules via toml configuration
• High performance using go-git
• JSON, SARIF, and CSV reporting
• Private repo scans using key or password based authentication