# Install betterleaks with Homebrew, dnf, MacPorts, Nix, winget Secrets scanner built for configurability and speed. Version 1.7.3 via Homebrew; verified 2026-07-31. Also installable with nix: nix profile install nixpkgs#betterleaks. ## Install ```sh sudo av install brew:betterleaks ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install betterleaks ``` Evidence: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install betterleaks ``` Evidence: MacPorts ports tree: security/betterleaks/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - dnf (92%): ```sh sudo dnf install betterleaks ``` Evidence: Fedora Rawhide package metadata: betterleaks from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#betterleaks ``` Evidence: nixpkgs package indexes: pkgs/by-name/be/betterleaks/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ### Windows - winget (92%): ```sh winget install --id Betterleaks.Betterleaks -e ``` Evidence: Windows Package Manager source index: Betterleaks.Betterleaks from https://cdn.winget.microsoft.com/cache/source.msix ## Package facts - **Package key:** brew:betterleaks - **Package manager:** Homebrew - **Version:** 1.7.3 - **Source summary:** Secrets scanner built for configurability and speed - **Homepage:** - **Repository:** - **Last updated:** 2026-07-31T17:38:55Z - **Generated:** 2026-08-03T19:37:03+00:00 ## Executables - betterleaks (alias) ## Install behavior - Bottle: not available ## Freshness - Page generated: 2026-08-03 - Package-manager version: 1.7.3 ## Project history and usage Betterleaks is a new secrets-scanning CLI focused on configurable detection, contextual filtering, secret validation, and scanning across Git, local directories, GitHub, GitLab, Hugging Face, S3, and stdin. ### Project history The official repository was created in February 2026 and describes Betterleaks as maintained by the people behind Gitleaks, including Gitleaks' original author. Early 2026 releases moved quickly, reaching v1.6.0 by June 2026. ### Adoption history Adoption history is still young, but the input already records Homebrew, Fedora, MacPorts, Nix, and winget packaging. The project also publishes container usage through GitHub Container Registry in its README installation examples. ### How it is used Betterleaks is used to scan repositories, local paths, hosted forges, object storage, and stdin for secrets. Its configuration model uses TOML rules with Expr-based filters and validation checks, and it keeps compatibility with Gitleaks-shaped configs. ### Why package nerds care Betterleaks matters to package nerds as a fast-moving 2026 entry in the secret-scanning ecosystem: it inherits expectations from Gitleaks but pushes more logic into configurable filters and validation. The interesting packaging angle is how quickly a security CLI can appear across Homebrew, Linux packages, containers, and Windows package feeds. ### Timeline - 2026: Repository created in February. - 2026: Early 1.x releases published through spring and summer. - 2026: v1.6.0 released in June. ### Related projects - Related projects include Gitleaks, TruffleHog, git-secrets, detect-secrets, and hosted secret-scanning features in GitHub and GitLab. ### Sources - - - - source_facts.package-manager ## Security Notes No matching local secret-handling manifest was found for betterleaks. Nucleus package metadata is still published here so future coverage has a stable package URL. ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: ./.betterleaks.toml, ./.gitleaks.toml ## Other Package-Manager Records - Nix - betterleaks: normalized package name match | nixpkgs package indexes: pkgs/by-name/be/betterleaks/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - dnf - betterleaks - 1.7.0-2.fc45: normalized package name match | Fedora Rawhide package metadata: betterleaks from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Secrets scanner built for configurability and speed | https://github.com/betterleaks/betterleaks - MacPorts - betterleaks: normalized package name match | MacPorts ports tree: security/betterleaks/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 - winget - Betterleaks.Betterleaks: normalized package name match | Windows Package Manager source index: Betterleaks.Betterleaks from https://cdn.winget.microsoft.com/cache/source.msix ## Combined YAML source View the package source record on GitHub. [combined/betterleaks.yml](https://github.com/mxcl/pkgdb/blob/main/combined/betterleaks.yml) ## Sources - pkg.so package database - Geiger risk classifier - curated configuration and credential file locations - curated package history - pkgdb category and tag curation - external package-manager database matches - cross-ecosystem install command graph