# gitleaks v8.26.0

- Product: gitleaks (https://whatsnew.fyi/product/gitleaks)
- Vendor: Zachary Rice
- Date: 2025-05-12
- Version: v8.26.0
- Original notes: https://github.com/gitleaks/gitleaks/releases/tag/v8.26.0
- Permalink: https://whatsnew.fyi/product/gitleaks/releases/v8.26.0
- Labels: Platforms: Desktop

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **added** — Percent/URL decoding support for secret detection
- **added** — Identify slow file feature
- **added** — 1Password secret key detection rule
- **fixed** — Remove slow element from kubernetes pattern
- **added** — Support for hex, percent (URL encoding), and b64 decoders

##### Changelog
* 78eebac Percent/URL Decoding Support (#1831)
* 6f967ca fix(kubernetes): remove slow element from pat (#1848)
* 88f56d3 feat: identify slow file (#1479)
* 9609928 rm 1password detect test since we test it in cfg gen
* 23cb69f feat(rules): Add 1Password secret key detection (#1834)

Calling this one @bplaxco's release as he introduced a really clever method for mixed decoding without sacrificing too much performance. As I stated in his PR, I think he's either a wizard or some time traveling AI. Dude [is wicked smaht](https://www.youtube.com/watch?v=hIdsjNGCGz4)

Anyways, Gitleaks now supports the following decoders: `hex`, `percent(url enconding)`, and `b64`. It's relatively straight forward to add a new decoder so if you're motivated, community contributions are welcomed!

Here's an example: 



```
~/code/gitleaks-org/gitleaks (master) cat decode.txt
text below
aGVsbG8sIHdvcmxkIQ%3D%3D%0A
text above
~/code/gitleaks-org/gitleaks (master) ./gitleaks dir decode.txt --max-decode-depth=2 --log-level=debug

    ○
    │╲
    │ ○
    ○ ░
    ░    gitleaks

4:08PM DBG using stdlib regex engine
4:08PM DBG unable to load gitleaks config from decode.txt/.gitleaks.toml since --source=decode.txt is a file, using default config
4:08PM DBG found .gitleaksignore file: .gitleaksignore
4:08PM DBG segment found: original=[29,38] pos=[29,38]: "%3D%3D%0A" -> "==\n"
4:08PM DBG segment found: original=[11,38] pos=[11,31]: "aGVsbG8sIHdvcmxkIQ==" -> "hello, world!"
4:08PM INF scanned ~50 bytes (50 bytes) in 1.5ms
4:08PM INF no leaks found
```