Cosmin V. Miron (Cosmic Sound)
06/29/2026, 5:00 PMCosmin V. Miron (Cosmic Sound)
06/29/2026, 5:00 PM❯ infisical scan --verbose 9m 34s
2026-06-29T18:58:11+02:00 INF scanning for exposed secrets...
6:58PM INF Unknown SCM platform. Use --platform to include links in findings. host=<http://gitlab.uhlhost.net|gitlab.uhlhost.net>
6:58PM INF 112 commits scanned.
2026-06-29T18:58:11+02:00 INF scan completed in 68.9ms
2026-06-29T18:58:11+02:00 INF no leaks found
18:58· cosmic@MDB· ~/Developer/MedusaJS/Plugins/medusa-notification-postal· main· ⎈ Testing · default
❯ infisical scan --platform=gitlab --verbose
Error: unknown flag: --platform
Usage:
infisical scan [flags]
infisical scan [command]
Available Commands:
git-changes Scan for secrets in uncommitted changes in a git repo
install Install scanning scripts and tools. Use --help flag to see all options
Flags:
-b, --baseline-path string path to baseline with issues that can be ignored
-c, --config string config file path
order of precedence:
1. --config flag
2. env var INFISICAL_SCAN_CONFIG
3. (--source/-s)/.infisical-scan.toml
If none of the three options are used, then Infisical will use the default scan config
--exit-code int exit code when leaks have been encountered (default 1)
--follow-symlinks scan files that are symlinks to other files
-h, --help help for scan
--log-opts string git log options
--max-target-megabytes int files larger than this will be skipped
--no-color turn off color for verbose output
--no-git treat git repo as a regular directory and scan those files, --log-opts has no effect on the scan when --no-git is set
--pipe cat some_file | infisical scan --pipe scan input from stdin, ex: cat some_file | infisical scan --pipe
--redact redact secrets from logs and stdout
-f, --report-format string output format (json, csv, sarif) (default "json")
-r, --report-path string report file
-s, --source string path to source (default ".")
-v, --verbose show verbose output from scan (which file, where in the file, what secret)
Global Flags:
--domain string Point the CLI to your Infisical instance (e.g., <https://eu.infisical.com> for EU Cloud, or <https://your-instance.com> for self-hosted). Can also set via INFISICAL_DOMAIN environment variable or the 'domain' field in .infisical.json. Required for non-US Cloud users. (default "<https://app.infisical.com/api>")
-l, --log-level string log level (trace, debug, info, warn, error, fatal)
--silent Disable output of tip/info messages. Useful when running in scripts or CI/CD pipelines.
--telemetry Infisical collects non-sensitive telemetry data to enhance features and improve user experience. Participation is voluntary (default true)
Use "infisical scan [command] --help" for more information about a command.Cosmin V. Miron (Cosmic Sound)
06/29/2026, 5:00 PMCosmin V. Miron (Cosmic Sound)
06/29/2026, 5:01 PM❯ infisical -v 12m 55s
infisical version 0.43.99Pylon
07/02/2026, 5:55 PM