trufflehog icon indicating copy to clipboard operation
trufflehog copied to clipboard

Find, verify, and analyze leaked credentials

Results 681 trufflehog issues
Sort by recently updated
recently updated
newest added

### Description: This pull request introduces a new V2 detector for Bannerbear API keys. The new version adds support for modern key formats and implements live API verification to eliminate...

enhancement

### TruffleHog Version ``` trufflehog 3.89.1 ``` ### Trace Output ``` [no output, even with --log-level=5] ``` ### Expected Behavior Trufflehog should run without segfaulting. ### Actual Behavior ``` xargs:...

bug

This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [github.com/sendgrid/sendgrid-go](https://redirect.github.com/sendgrid/sendgrid-go) | `v3.16.0+incompatible` -> `v3.16.1+incompatible` | [![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fsendgrid%2fsendgrid-go/v3.16.1+incompatible?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/go/github.com%2fsendgrid%2fsendgrid-go/v3.16.1+incompatible?slim=true)](https://docs.renovatebot.com/merge-confidence/)...

This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [github.com/google/go-containerregistry](https://redirect.github.com/google/go-containerregistry) | `v0.20.3` -> `v0.20.6` | [![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgoogle%2fgo-containerregistry/v0.20.6?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/go/github.com%2fgoogle%2fgo-containerregistry/v0.20.6?slim=true)](https://docs.renovatebot.com/merge-confidence/)...

This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [github.com/charmbracelet/bubbletea](https://redirect.github.com/charmbracelet/bubbletea) | `v1.3.4` -> `v1.3.5` | [![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fcharmbracelet%2fbubbletea/v1.3.5?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/go/github.com%2fcharmbracelet%2fbubbletea/v1.3.5?slim=true)](https://docs.renovatebot.com/merge-confidence/)...

### Description: This PR streamlines the Dockerhub detector to improve both its precision and recall for identifying Dockerhub Personal Access Tokens (PATs) and usernames. Key updates include: * **Smarter Username...

# Improve GCP Application Default Credentials Detection ## Background Google Cloud Platform (GCP) supports multiple types of credential JSON files, each with different structures: 1. User Credentials (OAuth 2.0 Client...

### Description: `BoxOauth` detectors's pattern test is using random password generator for input which does not guarantees inclusion. This PR make sure that define characters in password generation must follow...

## Description Reverifying a secret with trufflehog requires re-scanning the source file, since many of the detectors depend on keywords before the secret itself, if you only have access to...

enhancement

fork off brandonjyan:bitbucketapppassword which lived here https://github.com/trufflesecurity/trufflehog/pull/1498 The previous complex logic has been replaced with a clean, single-pass approach using a unified credentialPatterns slice for simplicity and performance. The entire...