trufflehog
trufflehog copied to clipboard
Find, verify, and analyze leaked credentials
### Description: The documentation recommended to put insecure code into GH Actions workflows, this was lit up like a Christmas tree in CodeQL in my environment. This PR is to...
### Description: This PR introduces a detector-level cache to store verification results, allowing reuse for duplicate findings. To enhance security, secrets will be hashed using XXHash before being added to...
I want to scan my private repo and all my repo in the entire org. I followed the below commands and procedures, nothing worked. Could u please help me with...
Hi Team, i am raising github issue what i need to add cat s3-config.json { "sources": [ { "source": "s3", "bucket_name": "data-datalake-raw-east-stage", "prefix": "db-reporting/test/year=2024/month=6/day=13/", "region": "us-east-1" } ] } :~#...
I am using Trufflehog for a work-related audit finding closure and have run into another issue. When running a filesystem scan with a config file, the scan starts normally and...
### Description: This PR updates the FlightLabs API detector and updates (and fixes) its secret regex and also the verification URL and logic. ### Checklist: * [ ] Tests passing...
Hi, I'm currently trying to get trufflehog to run on a PR branch (in the example below my-branch) and compare it to the branch its being merged into (in the...
## Description Add support for RSA SecurID virtual MFA tokens https://www.rsa.com/products/securid/ ### Preferred Solution Expose serial number & seed of the virtual token. The seed allows to duplicate the token,...
### Description: - Restored caflou, calorieninja, cannyio detectors' health - Refactor verification logic across multiple detectors to use a unified `verifyMatch` function - Updated integration tests to reflect changes in...
### Checklist: * [x] Tests passing (`make test-community`)? * [x] Lint passing (`make lint` this requires [golangci-lint](https://golangci-lint.run/welcome/install/#local-installation))?