SHSelfHostIndex
GG

ggshield

Detect secrets across code, history and CI

Developer Tools & Git ★ 2k stars Easy setup MIT

ggshield is the open-source CLI from GitGuardian for detecting hardcoded secrets in source code, git history and CI pipelines. It can run fully on-premise against self-managed repositories.

Official siteSource code

Key features

  • Secret scanning CLI
  • Pre-commit hook
  • CI integration
  • IaC and SCA scanning

Strengths

  • Released under the MIT license
  • Easy to set up — beginner-friendly
  • First-class Docker support for quick deployment
  • Active community (2k GitHub stars)

Is ggshield secure?

OSV.dev has no published security advisories for ggshield's repository. No known vulnerabilities is not proof of security: it means none have been publicly catalogued.

Source: OSV.dev, checked 2026-10-14. How this is measured.

ggshield replaces

Self-hosted GitGuardian alternatives

Health badge

Maintain ggshield? Add its health score to your README. The badge links back to this page.

SelfHostIndex: 85 · excellent

Markdown
[![SelfHostIndex health score for ggshield](https://selfhostindex.com/badge/ggshield.svg)](https://selfhostindex.com/app/ggshield/)
HTML
<a href="https://selfhostindex.com/app/ggshield/"><img src="https://selfhostindex.com/badge/ggshield.svg" alt="SelfHostIndex health score for ggshield"></a>
reStructuredText
.. image:: https://selfhostindex.com/badge/ggshield.svg
   :alt: SelfHostIndex health score for ggshield
   :target: https://selfhostindex.com/app/ggshield/

The score is recomputed on every nightly rebuild from public repository data — see how it is calculated.

Compare ggshield

2 head-to-head comparisons.

Similar developer tools & git apps