tartufo
tartufo copied to clipboard
godaddy
Searches through git repositories for high entropy strings and secrets, digging deep into commit history
To help us get this pull request reviewed and merged quickly, please be sure to include the following items: * [ ] Tests (if applicable) * [ ] Documentation (if...
## 🐛 Bug Report While migrating repositories to GHEC, I had encountered examples where tartufo scan missed credentials that should have been reported as "Password in URL" issue type. Upon...
## Feature Request ## Is your feature request related to a problem? Please describe. It would be nice to have an interactive mode for use when cleaning up legacy repos....
To help us get this pull request reviewed and merged quickly, please be sure to include the following items: * [ ] Tests (if applicable) * [ ] Documentation (if...
To help us get this pull request reviewed and merged quickly, please be sure to include the following items: * [x] Tests (if applicable) * [ ] Documentation (if applicable)...
## 🐛 Bug Report There appears to be some bug in `click`, where it is unable to print bytes even thought it is typed as accepting bytes. We explicitly convert...
## 🐛 Bug Report It cannot parse a config like this: ```toml [tool.tartufo] exclude-signatures = [ "abc", "def", ] ``` ## To Reproduce run `tartufo update-signatures .` on a local...
## 🐛 Bug Report It's well-established that tartufo will examine configuration files in the target repository in order to parameterize a scan, but it is not possible to specify what...
## 🐛 Bug Report I was trying strings generated by this online tool and could not understand why it wasn't working. https://passwordsgenerator.net/ For example, this string `qdKy]^$6bc!hU}Z;VRURf=j9F-}6~Xh~ykM.bKxfHdw_z6=Ura2Z".?!U!;;Kxt!Rw(g>"/Fw~e%gF'4)=\[!c>jbB;Kg=8V%\` is not classed...
## Feature Request Add threading or concurrency to tartufo ## Is your feature request related to a problem? Please describe. Not a problem per-se, but on a monorepo with a...
