Searches through git repositories for secrets, digging deep into commit history and branches. This is effective at finding secrets accidentally committed.
Free • Open Source
What is truffleHog?
truffleHog previously functioned by running entropy checks on git diffs. This functionality still exists, but high signal regex checks have been added, and the ability to surpress entropy checking has also been added.
These features help cut down on noise, and makes the tool easier to shove into a devops pipeline.