Include gitleaks in gitlab-server pre commit hook mode?

[Stamka]

Hi.
I need to run gitleaks in gitlab when developer try to commit his code.
Is there some instructions how can I do it?

[maltemorgenstern]

Hey @Stamka,
there are different options available - and the choice depends on when you want to run gitleaks.

Option A:
If you want to run gitleaks locally (e.g. before the commit gets pushed to the GitLab server) then take a look at the pre-commit configuration: https://github.com/gitleaks/gitleaks#pre-commit

Option B:
If you want to run gitleaks on the GitLab server (which would require a self-hosted instance I think) then you should be able to configure a pre-receive hook: https://docs.gitlab.com/ee/administration/server_hooks.html

Option C:
If you want to run gitleaks on the GitLab server as part of a CI/CD pipeline you can use the gitleaks docker image and configure the job to fail if any secrets are detected.

Regards
Malte