What is the price of the Training Gitleaks - Detecting Git Secret Leaks training?

The price of the Training Gitleaks - Detecting Git Secret Leaks training is 4200€ HT. This includes access to all modules, training materials and personalized support. Funding solutions are available through OPCO.

Is the training Qualiopi certified?

Yes, Learni is a Qualiopi-certified training organization. This certification guarantees the quality of our courses and enables funding through OPCO and other mechanisms.

What is the duration of the Training Gitleaks - Detecting Git Secret Leaks training?

The Training Gitleaks - Detecting Git Secret Leaks training takes place over 28 heures. The program is structured in progressive modules for optimal skill development.

How can I fund my training?

Our courses are eligible for OPCO funding. Learni supports you through the funding process. A personalized quote is available upon request.

What are the prerequisites for this training?

The prerequisites for the Training Gitleaks - Detecting Git Secret Leaks training are: Proficiency in Git, regular use of the command line, basics of software security. A preliminary interview validates your eligibility.

Is the training available in person?

Yes, the Training Gitleaks - Detecting Git Secret Leaks training is available in in-person. The format can be adapted to your needs (inter, intra, custom).

Training Gitleaks - Detecting Git Secret Leaks | Learni

The story of Learni

Founded by passionate advocates of learning and innovation, Learni set out to make professional training accessible to everyone, everywhere in the world. Our team works in the largest cities such as Paris, Lyon, Marseille, and internationally, to support talents and organizations in their skills development.

Configure your training

Response within 24hNo commitment100% free

7 spots remaining for the next session

FormatParticipantsDateDetails

Which format do you prefer?

Methods, approaches, and teaching resources

The Training Gitleaks - Detecting Git Secret Leaks training is delivered in-person or remotely (blended-learning, e-learning, virtual classroom, remote in-person). At Learni, a Qualiopi-certified training organization, each program is designed to maximize skills acquisition, regardless of the training mode chosen.

The trainer alternates between demonstrative, interrogative, and active methods (through practical exercises and/or real-world scenarios). This pedagogical approach ensures concrete and directly applicable learning in the workplace.

Teaching resources provided

To ensure the quality of the Training Gitleaks - Detecting Git Secret Leaks training, Learni provides the following teaching resources:

Mac or PC computers, high-speed fiber internet, whiteboard or flipchart, video projector or interactive touchscreen (for remote sessions)
Training environments installed on workstations or accessible online
Course materials, practical exercises, and supplementary resources
Post-training access to materials and teaching resources

For in-house training at a location external to Learni, the client ensures and commits to having all necessary teaching materials (IT equipment, internet connection...) for the proper conduct of the training action in accordance with the prerequisites indicated in the communicated training program.

* contact us for remote feasibility** ratio varies depending on the training followed

Assessment methods

The assessment of skills acquired during the Training Gitleaks - Detecting Git Secret Leaks training is carried out through:

During training: case studies, practical exercises, and professional scenarios
At the end of training: self-assessment questionnaire and skills evaluation by the trainer
After training: training completion certificate detailing acquired skills

Training accessibility

Learni is committed to the accessibility of its professional training programs. All our training programs are accessible to people with disabilities. Our teams are available to adapt teaching methods to your specific needs. Do not hesitate to contact us for any accommodation request.

Training access terms and deadlines

Training objectives

Master Gitleaks to audit Git repositories in enterprise settings

Develop custom detection rules for professional secrets

Implement Gitleaks in certified CI/CD pipelines

Analyze and remediate leaks in Git histories

Optimize Gitleaks performance on large repositories

Acquire DevSecOps skills to secure development processes

Training program

Module 1Gitleaks Fundamentals: Installation and Initial Scans (CLI, config, first audits)

Quick installation of Gitleaks on various environments, configuration of .gitleaks.toml files to meet professional needs, initial scans on real repositories to identify exposed API tokens and passwords, practical exercises to validate results with detailed reports, collaborative analysis of false positives to refine detection from day one.

Module 2Advanced Gitleaks Rules: Customization and Fine Detection (YAML rules, regex)

Creating custom rules via YAML to target specific business secrets like AWS keys or certificates, mastering regular expressions for optimal precision, testing on concrete company cases with simulated secret injections, generating secure baselines, exercises to integrate GDPR compliance policies into Gitleaks scans.

Module 3Gitleaks Integration: CI/CD and Automation (GitHub Actions, GitLab CI, Jenkins)

Configuring Gitleaks in popular CI/CD pipelines, pre-push and pre-commit hooks to block vulnerable commits in real-time, exercises on GitHub Actions for automated scans on every PR, monitoring alerts via Slack or Jira, practical company cases to scale on massive monorepos with immediate feedback.

Module 4Gitleaks Optimization and Remediation: Histories and Best Practices (rewrites, alerts)

Scanning and cleaning Git histories with git filter-repo to erase past secrets without compromising integrity, optimizing performance on large repositories via caching and parallelism, developing business remediation plans with ROI metrics, finalizing the red-thread project with a custom dashboard, DevSecOps best practices for a zero-trust culture.