5.6M GitLab repos scanned, 17k live secrets uncovered – 2.8× more than Bitbucket
Luke Marshall used TruffleHog via AWS Lambda to scan all 5.6M public GitLab Cloud repos, finding 17,430 verified live secrets, a 2.8× higher count than Bitbucket and about 35% higher secret density per repo. Google Cloud Platform credentials were the most common leak, appearing in roughly one in 1,060 repositories.