GitGuardian

About GitGuardian

GitGuardian's API provides secret detection and remediation across software development workflows, including scanning content for policy breaks and managing secret incidents once detected. It supports honeytoken creation and deployment for detecting unauthorized access, IP allowlisting, and health checks on connected sources and repositories.

The API covers incident management workflows including assigning, resolving, ignoring, reopening, sharing, and tracking remediation status of detected secrets, along with retrieving the scope of impact and any public leak locations. It includes team and member management with SCIM support for provisioning users and groups, permission checks, and access control on incidents and resources. Authentication is available via OAuth2/OIDC and API tokens, including JWT creation.

The API is intended for organizations integrating automated secret-scanning and incident-response capabilities into their development pipelines and identity systems. The base URL is https://api.gitguardian.com/v1 or https://api.eu1.gitguardian.com/v1 depending on region, with all data exchanged as JSON and timestamps in ISO-8601 format.

Key features

• Detects secrets and policy breaks in code and text content via scanning API
• Manages and tracks secret incidents including assignment, resolution, and remediation workflows
• Deploys and manages honeytokens to detect unauthorized access
• IP allowlist management for access control
• Team and member management with SCIM support for user provisioning
• OAuth2/OIDC support for authentication and API token management

Frequently asked questions