Scan a whole fleet of GitHub or Bitbucket repositories for accidentally committed secrets.
Get a local AI summary of scan findings, including likely false positives and remediation priorities.
Track secret scan history over time and compare deltas between repeated scans.
Run private-repo scans locally without sending code or tokens to a hosted service.
| stefanodenti/leaklane | 0-bingwu-0/live-interpreter | 010zx00x1/faresnipe | |
|---|---|---|---|
| Stars | 2 | 2 | 2 |
| Language | Python | Python | Python |
| Setup difficulty | moderate | moderate | easy |
| Complexity | 3/5 | 2/5 | 2/5 |
| Audience | ops devops | general | general |
Figures from each repo's GitHub metadata at analysis time.
Requires Gitleaks, Python 3.10+, Node.js, and optionally Rust and LM Studio installed locally.
LeakLane is a tool for finding secrets, like passwords or API keys, that were accidentally committed into a group of code repositories, and it is built to run entirely on your own machine rather than sending your code to an outside service. Under the hood it uses an existing scanner called Gitleaks to search through repositories for exposed secrets, and it can optionally connect to a local AI tool called LM Studio to summarize the results, flag likely false alarms, and suggest what to fix first. Everything, including the AI step, stays local. The idea is to manage many repositories at once rather than scanning one at a time. You build what the project calls a pitlane, a saved list of GitHub and Bitbucket repositories, either by searching for them or adding their URLs directly. For private GitHub repositories, LeakLane reuses your existing GitHub CLI login instead of asking you to store a token inside the app. Every scan you run is saved, so you can look back at past results, compare what changed between scans, and browse a visual map of a repository's branches, tags, pull requests, and where the flagged findings sit within that history. It ships as a normal SvelteKit web app you can run locally, or as a desktop app built with Tauri, which packages a Python backend behind the same interface and can be built into a downloadable macOS package. To run it you need Git, Gitleaks itself, Python 3.10 or newer, Node.js and npm, and Rust if you want to build the desktop version. The GitHub CLI and LM Studio are both optional, used only for private repo access and AI summaries. Reports are saved as plain files, either in a local folder during development or in the app's data directory once installed. The project is currently an early alpha release focused on interface polish, and the author notes the macOS build is not yet signed or notarized. The README does not state a license.
A local, privacy-first desktop and web tool that scans many repositories for leaked secrets with Gitleaks and can summarize findings using a local AI model.
Mainly Python. The stack also includes Python, SvelteKit, Tauri.
The README does not state a license, so reuse terms are unclear.
Setup difficulty is rated moderate, with roughly 1h+ to a first successful run.
Mainly ops devops.
This repo across BitVibe Labs
Verify against the repo before relying on details.