ActionRank
Check your actions

Gitleaks

Actively maintained

gitleaks/gitleaks-action

Protect your secrets using Gitleaks-Action

★ 625 starsLast commit 12 days agoLatest v3.0.0
B
72
/ 100
Security 74Maintenance 84Popularity 52Reliability 70

Security signals

OpenSSF Scorecard5.7 / 10
SECURITY.md presentYes
Immutable releasesEnabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: gitleaks/gitleaks-action@e0c47f4f8be36e29cdc102c57e68cb5cbf0e8d1e # v3.0.0

Mutable tags like v3.0.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: gitleaks/gitleaks-action@e0c47f4f8be36e29cdc102c57e68cb5cbf0e8d1e # v3.0.0

Score breakdown

Security (35%)74
Popularity (20%)52
Maintenance (30%)84
Reliability (15%)70