← All repos

trufflehog

Find, verify, and analyze leaked credentials

GitHubtrufflesecurity.com
credentialsdevsecopsdynamic-analysisprecommitscanningsecretsecret-managementsecretssecuritysecurity-toolstrufflehogverification
Browse cluster: Claude AI Agent Frameworks & MCP Tools →
4,532commits
219contributors
6languages

Tech stack & purpose

TruffleHog is a Go-based tool developed by TruffleHog Security (referenced as `@trufflesecurity`) that discovers, classifies, validates, and analyzes leaked credentials and secrets. The tool can scan multiple sources including Docker images, Git repositories, and various integrations, with support for custom detectors and verification methods. It features an extensive detector system for identifying API keys, database passwords, private encryption keys, and other credentials across different platforms and services, and includes capabilities for Docker layer-by-layer scanning, namespace-based image enumeration, and configurable file exclusion patterns.

Community & reference links

Languages

Go
99.7%
Shell
0.2%
Python
0.1%
Makefile
0.0%
Dockerfile
0.0%
Gnuplot
0.0%

Contributors (top 30 of 219)