diff --git a/Dockerfile b/Dockerfile
index 8201e43..bb00878 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -15,6 +15,8 @@ ENV OPENSSH_KEYGEN_VERSION="9.7_p1-r3"
 ENV PRE_COMMIT_VERSION="3.7.1"
 # renovate: datasource=rubygems depName=mdl versioning=ruby
 ENV MDL_VERSION="0.13.0"
+# renovate: datasource=repology depName=gitleaks versioning=loose
+ENV GITLEAKS_VERSION="v8.18.4"
 
 RUN apk add --update --no-cache \
       build-base="${BUILD_BASE_VERSION}" \
@@ -27,6 +29,8 @@ RUN apk add --update --no-cache \
     pip install --no-cache-dir pre-commit=="${PRE_COMMIT_VERSION}" && \
     gem install --no-document mdl -v "${MDL_VERSION}" && \
     mkdir /data && \
-    git config --global --add safe.directory /data
+    git config --global --add safe.directory /data && \
+    wget https://github.com/gitleaks/gitleaks/releases/download/${GITLEAKS_VERSION}/gitleaks_${GITLEAKS_VERSION}_linux_x64.tar.gz && \
+    tar xf gitleaks_${GITLEAKS_VERSION}_linux_x64.tar.gz && cp gitleaks /usr/bin/
 
 WORKDIR /data