truffleHog
A secrets scanning tool that discovers, classifies, validates, and analyzes leaked credentials across multiple sources.
What is truffleHog?
TruffleHog is an open-source security tool that scans for leaked credentials across various data sources, including Git repositories, cloud storage, and collaboration platforms. It not only detects secrets but also verifies them against live APIs to confirm their validity and analyzes their permissions to assess risk.
Security engineers, DevOps teams, and developers who need to proactively identify and remediate exposed credentials in their codebases, infrastructure, and third-party integrations.
Developers choose TruffleHog for its extensive detector library, active verification that eliminates false positives, and support for a wide range of sources—all in a single, self-hostable tool that integrates seamlessly into CI/CD pipelines.
Overview
Find, verify, and analyze leaked credentials
Use Cases
Best For
- Scanning Git repositories for accidentally committed API keys
- Monitoring S3 buckets and Google Cloud Storage for exposed credentials
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
