trufflehog
trufflehog copied to clipboard
Scanning personal gist(s?) when specific repo supplied
Community Note
- Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
- Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request
- If you are interested in working on this issue or have submitted a pull request, please leave a comment
TruffleHog Version
trufflehog 3.6.1
Trace Output
Ran the following command (obfuscating repo name)
docker run -it -v "$PWD:/pwd" trufflesecurity/trufflehog:latest github --repo https://github.com/$org/$repo --only-verified --debug --token=$GH_TOKEN
Expected Behavior
I expected it only to scan the specified repo
Actual Behavior
It scanned my personal gist (the only one tied to my username) AND the specified repo
Additional Context (Debug flag output)
DEBU[0000] running version 3.6.1
2022/06/08 21:17:32 [updater parent] run
2022/06/08 21:17:32 [updater parent] checking for updates...
2022/06/08 21:17:32 [updater parent] failed to get latest version: already up to date
2022/06/08 21:17:32 [updater parent] starting /usr/bin/trufflehog
DEBU[0000] running version 3.6.1
2022/06/08 21:17:32 [updater child#1] run
2022/06/08 21:17:32 [updater child#1] start program
trufflehog 3.6.1
DEBU[0000] running with up to 6 workers
DEBU[0000] loaded 2 decoders
DEBU[0000] loaded 695 detectors total, 695 with verification enabled. 0 with verification disabled
INFO[0000] starting pprof and fgprof server on :18066 /debug/pprof and /debug/fgprof
🐷🔑🐷 TruffleHog. Unearth your secrets. 🐷🔑🐷
DEBU[0000] Found 2 total repos to scan
DEBU[0000] attempting to clone repo 2/2 name="trufflehog - github" repo="https://gist.github.com/ad2e8{obfuscated..}.git" source=SOURCE_TYPE_GITHUB
DEBU[0000] attempting to clone repo 1/2 name="trufflehog - github" repo="https://github.com/{obfuscated...}.git" source=SOURCE_TYPE_GITHUB
2022/06/08 21:17:33 [updater parent] checking for updates...
{"level":"debug","time":"2022-06-08T21:17:33Z","message":"executing: /usr/bin/git -C /tmp/trufflehog2056972441 log -p -U0 --full-history --all"}
DEBU[0001] Scanning complete. Scan time: 0.054571
DEBU[0001] scanned 1/2 repos
{"level":"debug","time":"2022
Environment
- Docker on MacOS