compare
Gitleaks vs TruffleHog
The same facts for both, read from GitHub every night, and the relation a person reviewed.
| Fact | Gitleaks | TruffleHog |
|---|---|---|
| Language | Go | Go |
| Licence | MIT | AGPL-3.0 |
| Stars | 30k | 28k |
| Latest | v8.30.1 | v3.98.1 |
| Last push | 2026-09-30 | 2026-10-06 |
| Release cadence | about 61 days between releases | about 1 day between releases |
| Active contributors | 1 commit author on the default branch in the last 90 days | 37 commit authors on the default branch in the last 90 days |
| Flags | none | none |
How they relate
Both replace GitGuardian. Alternatives to GitGuardian →
PartialGitleaksScans repositories, history and diffs for secrets from the CLI, a pre-commit hook or CI, without a dashboard.
PartialTruffleHogFinds and verifies secrets in git, buckets, chat and more from the CLI or CI, without a remediation dashboard.
Gitleaks
- v8.30.12026-03-2183d9cd684c87d95d656c1458ef04895a7f1cbd8e update goreleaser
- v8.30.02025-11-266eaad03 0 to 5 - notes on recursive decoding (#1994)
- v8.29.12025-11-19fb5d707 thats a paddlin
- v8.29.02025-11-04ed65b65 Add trace log for skipped archive file when not enabled (#1961)
- v8.28.02025-07-204fb4382 cant count
Gitleaks
unsigned The latest release, v8.30.1, carries no signature GitHub could verify.
Loading the security report
TruffleHog
✓ signed The latest release, v3.98.1, carries a signature GitHub verified.
Loading the security report