trufflehog
trufflehog copied to clipboard
Find, verify, and analyze leaked credentials
### Description: This pull request introduces a new V2 detector for Bannerbear API keys. The new version adds support for modern key formats and implements live API verification to eliminate...
### TruffleHog Version ``` trufflehog 3.89.1 ``` ### Trace Output ``` [no output, even with --log-level=5] ``` ### Expected Behavior Trufflehog should run without segfaulting. ### Actual Behavior ``` xargs:...
This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [github.com/sendgrid/sendgrid-go](https://redirect.github.com/sendgrid/sendgrid-go) | `v3.16.0+incompatible` -> `v3.16.1+incompatible` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/)...
This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [github.com/google/go-containerregistry](https://redirect.github.com/google/go-containerregistry) | `v0.20.3` -> `v0.20.6` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/)...
This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [github.com/charmbracelet/bubbletea](https://redirect.github.com/charmbracelet/bubbletea) | `v1.3.4` -> `v1.3.5` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/)...
### Description: This PR streamlines the Dockerhub detector to improve both its precision and recall for identifying Dockerhub Personal Access Tokens (PATs) and usernames. Key updates include: * **Smarter Username...
# Improve GCP Application Default Credentials Detection ## Background Google Cloud Platform (GCP) supports multiple types of credential JSON files, each with different structures: 1. User Credentials (OAuth 2.0 Client...
### Description: `BoxOauth` detectors's pattern test is using random password generator for input which does not guarantees inclusion. This PR make sure that define characters in password generation must follow...
## Description Reverifying a secret with trufflehog requires re-scanning the source file, since many of the detectors depend on keywords before the secret itself, if you only have access to...
fork off brandonjyan:bitbucketapppassword which lived here https://github.com/trufflesecurity/trufflehog/pull/1498 The previous complex logic has been replaced with a clean, single-pass approach using a unified credentialPatterns slice for simplicity and performance. The entire...