diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 2bde956348..7dce969206 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -134,3 +134,9 @@ repos:
     # This is a slow hook, so only run this if --hook-stage manual is passed
     stages: [manual]
     additional_dependencies: [cmake, ninja]
+
+# Scan for secret files that should not be committed
+- repo: https://github.com/gitleaks/gitleaks
+  rev: v8.30.1
+  hooks:
+  - id: gitleaks