trufflehog

trufflehog copied to clipboard

trufflehog git concurrency does not work as expected

3

I am trying to speed up the trufflehog git scan with this "--concurrency" arg. After some trials, it does not look very right.  As shown, it takes 14s when...

yang0369

Change source reporter interfaces to not return errors

2

### Description: The error was meant to allow the reporter to end scanning, but in practice would only be useful for context cancellations, which sources should be handling anyway. Removing...

mcastorina

Add severity for each finding

3

Description Add a severity level (e.g., Low, Medium, High, Critical) to each finding to help prioritize remediation efforts. Preferred Solution Include a severity field in the output based on the...

roisec

https://aws.amazon.com/blogs/security/announcing-upcoming-changes-to-the-aws-security-token-service-global-endpoint/

rgmz

Hello, i have face an issue while scanning APK files of company such as Spotify and i encounter the following error ``` TruffleHog failed with return code 1 {"level":"info-0","ts":"2025-09-06T15:46:56-07:00","logger":"trufflehog","msg":"Setting detector...

philipsoutham

Fix nondeterminism in custom detectors

3

Previously, a custom detector configured to use multiple patterns would produce its results from a match in a nondeterministic order. This behavior could be seen by running the custom detectors...

bradlarsen

Add generic JWT detection and verification

1

### Description: This adds a generic detector and verifier for generic JWTs. Detection is simple using regular expressions. However, this will produce many false positives. JWT verification is performed using...

bradlarsen

feat(detectors): added make.com api_token and mcp_token detectors

7

### Description: [Make.com](https://www.make.com/en) is a low-code/no-code automation platform that allows users to connect apps and services typically to automate business workflows. I've added two new detectors for Make.com: 1. **api_token**...

Jeff-Rowell

Updated grafana and grafanaserviceaccount and added a new detector for grafana api keys. ### Description: Added one new detector for generic grafana api keys. Also updated the patterns and some...

davand01

### Description: This PR eliminates flakiness in custom detector test caused due to indeterminate order of Raw. [Test failure instance](https://github.com/trufflesecurity/trufflehog/actions/runs/17292342988/job/49087286911) ### Checklist: * [x] Tests passing (`make test-community`)? * [x]...

amanfcp