Betterleaks

Open-source secrets scanner built from scratch by the original author of Gitleaks. Detects leaked API keys, tokens and credentials across filesystems, git history, GitHub/GitLab orgs and S3 buckets, with CEL-based rule validation and active-secret verification to cut false positives. Ships as a pure-Go CLI that is a drop-in replacement for Gitleaks.