# Secrets Scan

{% embed url="<https://youtu.be/UVbRxRU7chA>" %}

### **Prerequisite**

* Clouddefense CLI&#x20;
* Gitleaks

### Steps

To scan for secrets we need to pass “--no-git” flag from the CLI like,

```
// Some codecdefense full --api-key=6262fe7f-1434-2711-78fa-268ce4187339 --path=/opt/secretsandstuff --project-name=leaks --no-git
```

In the above command we pass our api-key, with the project path to scan and –no-git to include secret scans.

Once scans finish we can look the data in UI

<figure><img src="https://lh5.googleusercontent.com/Olyfc_pWxOrZ2JLEcacRI_giu5zTCTdNAxkUtXVK4sTqq6X2zp7GGtZJ7n4m3jx_cZUmUCWDdZz_sAWMsiWGIdaZhG7zNH98XszFvD8eZxCzMOsRBjeYBwwfMVpQj_tcuqiPk8UKLiIgBMKUqclATHgT-QhHdXkZqO6wLEX642VNwBzH6t6R58T4EA" alt=""><figcaption></figcaption></figure>

And once expanded ,we can see our data

<figure><img src="https://lh6.googleusercontent.com/4mccujsfm-nC_gNp6cypwl0PUZRc3NmrWB62d9jsLjPxjPdELfkdU9fu44em5vXJCbbxh-fEXYiBCjl6qWpjtqCZcv0roRdsVBs8v2LhVwj3JV-DdM7tAWAYag1YqAl42uegFWyIPIzVASBjTcK_5JkPaz9shgZzU-up7IT8VE4qiO1UZhWNu-aq3Q" alt=""><figcaption></figcaption></figure>