trufflehog
Scans git history, filesystems, and URLs for leaked credentials - and actually verifies them live against 800+ APIs, so you get confirmed secrets, not regex noise.
Tags: secrets, credentials, verified, git
- Category
- secrets
- Maintenance signal
- active
Project repository · Documentation
Use this when: CI trust. Scan a repository or file you already have.
Install
brew
brew install trufflehogscript
curl -sSfL https://raw.githubusercontent.com/trufflesecurity/trufflehog/main/scripts/install.sh | sh -s -- -b /usr/local/binCommand templates
Scan a git repo (verified only)
trufflehog git {repo} --only-verifiedScan a live host
trufflehog filesystem {path} --only-verified