gitleaks-unreachable-commits

gitleaks-unreachable-commits.sh

#!/bin/bash

if ! git rev-parse --is-inside-work-tree > /dev/null 2>&1; then
    echo "This is not a git repo."
    exit 1
fi

git fsck --full --no-reflogs --unreachable |
  grep 'unreachable commit' |
  awk '{print $3}' |
  while read commit; do
    GITLEAKS="$(git show ${commit} | gitleaks stdin -v 2>/dev/null)"
    if [ $? -eq 1 ]; then
      echo "${commit}"
      echo "${GITLEAKS}"
      echo "---------------------------------"
    fi
  done