tartufo
tartufo copied to clipboard
Searches through git repositories for high entropy strings and secrets, digging deep into commit history
## Feature Request ## Is your feature request related to a problem? Please describe. Some of the unit tests for this project are a bit obtuse and far from ideal....
## 🐛 Bug Report Tartufo does not scan commits that are not reachable from a currently existing branch. ## To Reproduce ```bash $ python tartufo/__main__.py --output-format compact --no-entropy scan-remote-repo https://mysite/my-tartufo-test...
## Feature Request ## Is your feature request related to a problem? Please describe. Right now, when tartufo is running, it can be very silent, and you may not even...
## Feature Request Currently, per-issue files (created using `--output-dir`) have non-deterministic names based on generated UUIDs. I suggest that we name these files using the issue hash instead. This would...
## Feature Request Enhance the automatic exclusion logic ## Is your feature request related to a problem? Please describe. In version 2.6 a feature was added to not flag the...
## Feature Request ## Is your feature request related to a problem? Please describe. tartufo will not detect Linux passwords that have been hashed using many common algorithms. These may...
## Feature Request ## Is your feature request related to a problem? Please describe. Presently, we are trying to steer people towards exclusion patterns like `uses:(.*)@[a-zA-Z0-9]{40}$` -- however, that may...
## Feature Request ## Is your feature request related to a problem? Please describe. When running tartufo via a GitHub PR Workflow, no commits are scanned due to how actions/checkout...
## 🐛 Bug Report The regex for the `Password in URL` produces false positives when attempting to externalize the password. ## To Reproduce Have a file with the given text:...
## Feature Request ## Is your feature request related to a problem? Please describe. n/a ## Describe the solution you'd like Publish a GitHub Action for Tartufo on the GitHub...