trufflehog
trufflehog copied to clipboard
General Query - Help to scan my private repositories
I want to scan my private repo and all my repo in the entire org. I followed the below commands and procedures, nothing worked. Could u please help me with the right direction?
Command followed for ssh into the private repo: (Added my public key generated from the hosted vm to the github)
docker run --rm -it -v "$PWD:/pwd" trufflesecurity/trufflehog:latest git git@<my-private repo>
Error received: errortrufflehog error preparing git repo for scanning{"error": "failed to clone unauthenticated Git repo (ssh://
Command followed for scan private repo with personal access token:
docker run --rm -it -v "$PWD:/pwd" trufflesecurity/trufflehog:latest github --repo <https-github-url> --token <my-token>
Error received: "2023-07-19T13:43:19Zinfo-0trufflehogloaded decoders{"count": 3}
2023-07-19T13:43:19Zinfo-0trufflehogloaded detectors{"total": 745, "verification_enabled": 745, "verification_disabled": 0}
TruffleHog. Unearth your secrets. 2023-07-19T13:43:19Zinfo-0trufflehogCompleted enumeration{"source_type": "SOURCE_TYPE_GITHUB", "source_name": "github", "num_repos": 1, "num_or
gs": 0, "num_members": 0}
2023-07-19T13:43:20Zinfo-0trufflehogscanning comments{"source_type": "SOURCE_TYPE_GITHUB", "source_name": "github"}"
Doc followed https://docs.trufflesecurity.com/docs/configuration/sources/
I’m not sure how do use the above doc for github config as a part of my self-hosted cli version running in ubuntu machine?
It would be a great support for smaller users like me. Also the self-hosted is available as a complete web-version? Or only cli.
Thanks in advance. Please help me on this