trufflehog icon indicating copy to clipboard operation
trufflehog copied to clipboard

Find, verify, and analyze leaked credentials

Results 735 trufflehog issues
Sort by recently updated
recently updated
newest added

### Description: This fixes #1939. ### Checklist: * [x] Tests passing (`make test-community`)? * [ ] Lint passing (`make lint` this requires [golangci-lint](https://golangci-lint.run/usage/install/#local-installation))?

### Description: This PR fixes the regex for the calendly api key. The current regex doesn't detect the JWT key properly and misses. This regex is more open and detects...

### Description: This PR fixes the domain and verifier both. ### Checklist: * [ ] Tests passing (`make test-community`)? * [ ] Lint passing (`make lint` this requires [golangci-lint](https://golangci-lint.run/usage/install/#local-installation))?

Opening this PR again as PR #1863 was closed due to inactivity. Description: This PR adds the older format of dockerhub token which is still valid and i have seen...

Hacktoberfest-Detector-Competition-Fix

### Description: Removed the prefix regex "zendesk" from the token regex as it was hindering with detection. Sometimes, the zendesk keyword will not be in the 40 char range. Either...

This PR fixes the alchemy detector. There are 2 types of tokens that alchemy provides one is [a-z0-9A-Z_]{32} and one is alcht_[0-9a-zA-Z]{30}. Both types of tokens will be detected by...

### Description: Seen instance url without "my" in the name so removed that. It shouldn't matter because [0-9a-zA-Z-\.]{1,100} should also cover any instances of keyword "my" in the instance name....

### Description: Gives users the ability to perform custom detector verification without having to spin up a verification server. With this feature TruffleHog makes the requests straight to the provider...

Hello Team, ## Description Verify a key only once even if it is found multiple times in the same or different files. For example, in the below screenshot, we can...

enhancement
pkg/detectors

Please review the [Community Note](https://github.com/trufflesecurity/trufflehog/blob/main/.github/community_note.md) before submitting ## Description When a verification test fails, the log output should include this information so that _potentially valid_ secrets aren't discounted. For instance,...

enhancement