truffleHog
A secrets scanning tool that discovers, classifies, validates, and analyzes leaked credentials across multiple sources.
What is truffleHog?
TruffleHog is an open-source security tool that scans for leaked credentials across various sources like Git repositories, cloud storage, and collaboration platforms. It detects secrets such as API keys, database passwords, and private encryption keys, then verifies them against live APIs to confirm their validity. The tool helps developers and security teams prevent data breaches by identifying exposed credentials before they can be exploited.
Security engineers, DevOps teams, and developers who need to proactively scan their codebases, infrastructure, and collaboration tools for accidentally committed or stored secrets. It's particularly valuable for organizations implementing DevSecOps practices.
Developers choose TruffleHog for its extensive detection capabilities, active verification that eliminates false positives, and support for a wide range of sources including Git, cloud platforms, and CI/CD systems. Its ability to analyze credential permissions provides deeper security insights than simple pattern matching.
Overview
Find, verify, and analyze leaked credentials
Use Cases
Best For
- Scanning Git repositories for accidentally committed API keys and passwords
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
