- Home
- Secrets Scanning Software
- ggshield
ggshield
Paris, France
What it is
ggshield is GitGuardian’s command-line application for detecting and preventing hardcoded secrets before code is pushed. It can scan local files and repositories, run as a pre-commit hook or in CI, and serve as a pre-receive hook for self-managed version control instances. It can also examine Docker image layers, build arguments and Dockerfiles. Documentation says it detects more than 600 secret types. The CLI is open source, though the detection library behind GitGuardian’s public API is closed source. ggshield runs on macOS, Linux and Windows, and supports API and self-hosted use. Standard installation requires Git and a supported, non-end-of-life Python version; standalone packages are an exception. An API key is required to connect to a GitGuardian workspace, and the login command can provision and save a personal access token. Files over 1 MB are ignored, and an API call accepts up to 20 documents, splitting larger scans across calls. GitGuardian says it retains scan metadata such as call time and scan mode, but not scan incidents or secrets in its backend.
For and against
For
- Detects more than 600 secret types
- Scans local files, repositories and Docker artifacts
- Can run as a pre-commit hook or in CI
- Open-source command-line application
Against
- Files larger than 1 MB are ignored
- Standard installation requires Git and supported Python
- Requires an API key for a GitGuardian workspace
The verdict
ggshield covers several points in a development workflow, from local repositories and pre-commit checks to CI and self-managed pre-receive hooks. Review its file-size limit and standard installation requirements when deciding whether it fits your setup.
Who it suits
ggshield suits developers and teams who want to check code for hardcoded secrets before pushing, including through pre-commit or CI workflows. It also supports scanning Docker artifacts and self-managed version control instances.
Plans and prices
Starter
Up to 25 devs · 10K API calls/month · Up to 500 historical scan detections · Unlimited real-time scanning
Read 29 Sep 2026 · gitguardian.com
Business
Pricing not shown · ggshield page says a 30-day free trial is available
Read 29 Sep 2026 · gitguardian.com
Enterprise
Custom pricing · Unlimited teams, API calls, and custom detectors · Dedicated support channel
Read 29 Sep 2026 · gitguardian.com
On the record
- Authentication
- ggshield requires an API key to authenticate with a GitGuardian workspace, and its login command can provision and store a personal access token.docs.gitguardian.com · read 29 Sep 2026
- CI integrations
- The product page describes CI/CD pipeline use and displays Travis CI and Jenkins logos.gitguardian.com · read 29 Sep 2026
- Company
- GitGuardian says it was founded in Paris in November 2017.gitguardian.com · read 29 Sep 2026
- Detection
- The documentation says ggshield detects more than 600 types of secrets.docs.gitguardian.com · read 29 Sep 2026
- Docker
- ggshield can scan Docker image layers, build arguments, and Dockerfiles for hardcoded secrets.gitguardian.com · read 29 Sep 2026
- Open source
- The ggshield CLI is open source, while the secrets detection library behind GitGuardian’s public API is closed source.gitguardian.com · read 29 Sep 2026
- Operating systems
- ggshield works on macOS, Linux, and Windows; the standard installation requires a supported, non-end-of-life Python version and Git, except when using standalone packages.docs.gitguardian.com · read 29 Sep 2026
- Purpose
- ggshield is GitGuardian’s command-line application for detecting and preventing hardcoded secrets before code is pushed.gitguardian.com · read 29 Sep 2026
- Scan data
- For ggshield scans, GitGuardian says it stores metadata such as call time, request size, and scan mode, while scan incidents and secrets are not stored in its backend.gitguardian.com · read 29 Sep 2026
- Scanning
- ggshield can scan local files and repositories, run as a pre-commit hook, run in CI, and run in a pre-receive hook for self-managed version control instances.docs.gitguardian.com · read 29 Sep 2026
- Scanning limit
- Files larger than 1 MB are ignored, and the API accepts at most 20 documents per call, bundling larger scans into multiple calls.docs.gitguardian.com · read 29 Sep 2026
- Security compliance
- GitGuardian says it has maintained SOC 2 Type II compliance since 2022 and undergoes annual audits.gitguardian.com · read 29 Sep 2026
- Support
- GitGuardian directs users to the official GitHub repository to report bugs or request features.gitguardian.com · read 29 Sep 2026
