Repositories list

• trufflehog

  Public
  Find, verify, and analyze leaked credentials

  securitycredentialssecret+ 9secret-managementverificationsecretsdynamic-analysisscanningprecommitsecurity-tools+ 2

  Go

  •

  GNU Affero General Public License v3.0

  •2.2k•24k•205•88•Updated Dec 8, 2025Dec 8, 2025

• homebrew-trufflehog

  Public

  trufflesecurity/homebrew-trufflehog’s past year of commit activity
  Homebrew formulas for TruffleHog

  Ruby

  •0•0•0•0•Updated Dec 2, 2025Dec 2, 2025

• xsshunter

  Public
  SCSS

  •

  MIT License

  •143•525•6•5•Updated Nov 24, 2025Nov 24, 2025

• saml

  Public

  trufflesecurity/saml’s past year of commit activity
  SAML library for go

  Go

  •

  BSD 2-Clause "Simplified" License

  •473•0•0•1•Updated Nov 20, 2025Nov 20, 2025

• helm-charts

  Public
  Mustache

  •

  Apache License 2.0

  •1•2•0•1•Updated Nov 19, 2025Nov 19, 2025

• pr-approval-check

  Public
  A Github Action that can be used to validate approvers.

  0•1•0•0•Updated Nov 3, 2025Nov 3, 2025

• how-to-rotate

  Public

  trufflesecurity/how-to-rotate’s past year of commit activity
  An open-source collection of API key rotation tutorials.

  secrets-managementtrufflehogkey-rotation+ 1leaked-secrets

  JavaScript

  •

  GNU Affero General Public License v3.0

  •18•75•1•3•Updated Sep 5, 2025Sep 5, 2025

• force-push-scanner

  Public

  trufflesecurity/force-push-scanner’s past year of commit activity
  Scan for secrets in dangling commits on GitHub using GH Archive data.

  secretsgharchiveforce-push+ 2secret-scanningdangling-commits

  Python

  •

  GNU Affero General Public License v3.0

  •31•410•4•2•Updated Jul 3, 2025Jul 3, 2025

• cloudsql-exporter

  Public
  Automatically export CloudSQL databases to Google Cloud Storage

  Go

  •7•10•0•6•Updated May 19, 2025May 19, 2025

• driftwood

  Public archive

  trufflesecurity/driftwood’s past year of commit activity
  Private key usage verification

  credentialssecretsecret-management+ 1trufflehog

  Go

  •

  Apache License 2.0

  •37•433•5•2•Updated Apr 4, 2025Apr 4, 2025

• trufflehog-burp-suite-extension

  Public
  Official TruffleHog Burp Suite Extension. Scan Burp Suite traffic for 800+ different types of secrets (API keys, passwords, SSH keys, etc) using TruffleHog.

  secretsburpsuiteburp-extensions+ 3trufflehogsecrets-detectionsecret-scanning

  Python

  •18•84•5•3•Updated Mar 12, 2025Mar 12, 2025

• social-app-django

  Public
  Python Social Auth - Application - Django

  Python

  •

  BSD 3-Clause "New" or "Revised" License

  •396•0•0•0•Updated Feb 20, 2025Feb 20, 2025

• aho-corasick-bobusumisu

  Public

  trufflesecurity/aho-corasick-bobusumisu’s past year of commit activity
  Aho-Corasick string-searching algorithm in Go

  Go

  •

  MIT License

  •17•1•0•0•Updated Jan 10, 2025Jan 10, 2025

• go-grpc-http1

  Public

  trufflesecurity/go-grpc-http1’s past year of commit activity
  A gRPC via HTTP/1 Enabling Library for Go

  Go

  •

  Apache License 2.0

  •31•0•0•0•Updated Dec 13, 2024Dec 13, 2024

• TruffleHog-Enterprise-Github-Action

  Public
  Find exposed credentials using GitHub Actions with TruffleHog Enterprise.

  actionssecretstrufflehog+ 1github-actions

  Dockerfile

  •

  Apache License 2.0

  •9•16•1•0•Updated Nov 21, 2024Nov 21, 2024

• overseer

  Public

  trufflesecurity/overseer’s past year of commit activity
  Monitorable, gracefully restarting, self-upgrading binaries in Go (golang)

  Go

  •

  MIT License

  •214•7•0•1•Updated Nov 7, 2024Nov 7, 2024

• touchfile

  Public

  trufflesecurity/touchfile’s past year of commit activity
  A reasonably simple locking mechanism between concurrent processes.

  Go

  •

  Apache License 2.0

  •0•1•0•0•Updated Oct 24, 2024Oct 24, 2024

• disk-buffer-reader

  Public

  trufflesecurity/disk-buffer-reader’s past year of commit activity
  Re-readable reader

  Go

  •

  MIT License

  •2•2•0•0•Updated Oct 22, 2024Oct 22, 2024

• private-key-reuse-checker

  Public
  Python

  •

  GNU Affero General Public License v3.0

  •0•0•0•0•Updated Sep 27, 2024Sep 27, 2024

• trufflehog-github-actions-example

  Public

  trufflesecurity/trufflehog-github-actions-example’s past year of commit activity
  Demo of using the Trufflehog GitHub Action to automatically scan and update Pull Requests

  Python

  •5•1•0•4•Updated Aug 7, 2024Aug 7, 2024

• logwarden

  Public
  Process all of your GCP audit logs against OPA Rego policies and alert for violations in real-time.

  Open Policy Agent

  •

  Apache License 2.0

  •2•7•0•7•Updated Jul 15, 2024Jul 15, 2024

• waas-client-library-go

  Public

  trufflesecurity/waas-client-library-go’s past year of commit activity
  Coinbase Wallet as a Service (WaaS) Client Library in Go.

  Go

  •

  Other

  •69•1•0•1•Updated Jul 9, 2024Jul 9, 2024

• .github

  Public
  0•1•0•0•Updated Mar 6, 2024Mar 6, 2024

• gosnowflake

  Public

  trufflesecurity/gosnowflake’s past year of commit activity
  Go Snowflake Driver

  Go

  •

  Apache License 2.0

  •156•1•0•0•Updated Feb 28, 2024Feb 28, 2024

• terraform-gcp-logwarden

  Public
  Terraform module for running Logwarden in GCP

  Open Policy Agent

  •0•0•0•4•Updated Dec 18, 2023Dec 18, 2023

• WhoAmISlack

  Public
  Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.

  Python

  •1•42•0•0•Updated Dec 12, 2023Dec 12, 2023

• test_keys_internal

  Public archive
  Internal fork of test_keys used to test certain auth scenarios

  65•0•0•0•Updated Oct 19, 2023Oct 19, 2023

• test_keys

  Public
  65•8•2•0•Updated Oct 19, 2023Oct 19, 2023

• hacktoberfest2023

  Public

  trufflesecurity/hacktoberfest2023’s past year of commit activity
  Improve TruffleHog to win a laptop!

  2•3•0•0•Updated Oct 5, 2023Oct 5, 2023

• node-app-with-canary-token

  Public
  JavaScript

  •0•1•0•0•Updated Aug 23, 2023Aug 23, 2023