Credentials Masked while giving output in json Format

[SecTheBit]

Hi Team, It has been observed that trufflehog is Masking the credentials while giving output in json format. For example, this mongodb credentials has been detected , and also showing the leaked credentials (refer screenshot below) . But when I used the --json flag ,then in the output the credentials have been masked. (refer below screenshot)

Yes, the credentials has been shown in raw , in base64 format , but what is the purpose of encoding that in base64, can't we just show in the raw format.

[SecTheBit]

Also, I run the trufflehog with following command on my github repo (https://github.com/secthebit/Test_Keys) and in the output some of the api keys shown has been base64 encoded and some of them are not (refer screenshot below)

./trufflehog git --only-verified https://github.com/secthebit/Test_Keys.git --json

[dustin-decker]

This is a bug with the json output format that will be fixed by #825