diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 1d4142802a..e43ef7da67 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -25,3 +25,9 @@ repos:
     - id: trailing-whitespace
       files: \.(cgi|html|json|md|plist|py|rb|rdf|service|sh|template|ya?ml)$
       args: [--markdown-linebreak-ext=md]
+- repo: https://github.com/gitleaks/gitleaks
+  rev: 83d9cd684c87d95d656c1458ef04895a7f1cbd8e  # frozen: v8.30.1
+  hooks:
+    - id: gitleaks
+      name: run gitleaks
+      description: check for secrets with gitleaks