TruffleHog Credential Leak Scanner

Find, verify, and analyze leaked credentials across Git repositories, Slack, Jira, Docker images, and more using TruffleHog. Classifies 800+ secret types and validates whether discovered credentials are live.

Installation

Use the upstream install or setup path that matches your environment:

• docker run --rm -it -v "$PWD:/pwd" trufflesecurity/trufflehog:latest github --org=trufflesecurity
• brew install trufflehog
• docker run --rm -it -v "$PWD:/pwd" trufflesecurity/trufflehog:latest github --repo https://github.com/trufflesecurity/test_keys
• docker run --rm -it -v "%cd:/=%:/pwd" trufflesecurity/trufflehog:latest github --repo https://github.com/trufflesecurity/test_keys

Requirements and caveats from upstream:

• Docker:

• _{<i>Ensure Docker engine is running before executing the following commands:</i>}

• Using installation script, verify checksum signature (requires cosign to be installed)

Basic usage or getting-started notes:

• :rocket: Quick Start

• Clone the git repo. For example test keys repo.

• Source: https://github.com/trufflesecurity/trufflehog

• Extracted from upstream docs: https://raw.githubusercontent.com/trufflesecurity/trufflehog/HEAD/README.md

Source

• Agent Skill Exchange