Repositories list

• trufflehog

  Public

  trufflesecurity/trufflehog’s past year of commit activity
  Find, verify, and analyze leaked credentials

  securitycredentialssecret+ 9secret-managementverificationsecretsdynamic-analysisscanningprecommitsecurity-tools+ 2

  Go

  •

  GNU Affero General Public License v3.0

  •2.2k•25k•248•132•Updated Mar 4, 2026Mar 4, 2026

• common

  Public
  0•0•0•0•Updated Mar 2, 2026Mar 2, 2026

• helm-charts

  Public
  Mustache

  •

  Apache License 2.0

  •1•2•0•0•Updated Feb 27, 2026Feb 27, 2026

• homebrew-trufflehog

  Public
  Homebrew formulas for TruffleHog

  Ruby

  •0•0•0•0•Updated Feb 27, 2026Feb 27, 2026

• how-to-rotate

  Public
  An open-source collection of API key rotation tutorials.

  secrets-managementtrufflehogkey-rotation+ 1leaked-secrets

  JavaScript

  •

  GNU Affero General Public License v3.0

  •19•77•1•3•Updated Feb 9, 2026Feb 9, 2026

• test_keys

  Public
  3•1•0•0•Updated Jan 27, 2026Jan 27, 2026

• xsshunter

  Public

  trufflesecurity/xsshunter’s past year of commit activity
  SCSS

  •

  MIT License

  •147•548•6•5•Updated Nov 24, 2025Nov 24, 2025

• saml

  Public
  SAML library for go

  Go

  •

  BSD 2-Clause "Simplified" License

  •475•0•0•1•Updated Nov 20, 2025Nov 20, 2025

• pr-approval-check

  Public
  A Github Action that can be used to validate approvers.

  0•1•0•0•Updated Nov 3, 2025Nov 3, 2025

• force-push-scanner

  Public
  Scan for secrets in dangling commits on GitHub using GH Archive data.

  secretsgharchiveforce-push+ 2secret-scanningdangling-commits

  Python

  •

  GNU Affero General Public License v3.0

  •35•464•4•2•Updated Jul 3, 2025Jul 3, 2025

• cloudsql-exporter

  Public
  Automatically export CloudSQL databases to Google Cloud Storage

  Go

  •7•10•0•6•Updated May 19, 2025May 19, 2025

• driftwood

  Public archive
  Private key usage verification

  credentialssecretsecret-management+ 1trufflehog

  Go

  •

  Apache License 2.0

  •36•431•5•2•Updated Apr 4, 2025Apr 4, 2025

• trufflehog-burp-suite-extension

  Public
  Official TruffleHog Burp Suite Extension. Scan Burp Suite traffic for 800+ different types of secrets (API keys, passwords, SSH keys, etc) using TruffleHog.

  secretsburpsuiteburp-extensions+ 3trufflehogsecrets-detectionsecret-scanning

  Python

  •18•86•5•3•Updated Mar 12, 2025Mar 12, 2025

• social-app-django

  Public
  Python Social Auth - Application - Django

  Python

  •

  BSD 3-Clause "New" or "Revised" License

  •393•0•0•0•Updated Feb 20, 2025Feb 20, 2025

• aho-corasick-bobusumisu

  Public
  Aho-Corasick string-searching algorithm in Go

  Go

  •

  MIT License

  •17•1•0•0•Updated Jan 10, 2025Jan 10, 2025

• go-grpc-http1

  Public
  A gRPC via HTTP/1 Enabling Library for Go

  Go

  •

  Apache License 2.0

  •32•0•0•0•Updated Dec 13, 2024Dec 13, 2024

• TruffleHog-Enterprise-Github-Action

  Public
  Find exposed credentials using GitHub Actions with TruffleHog Enterprise.

  actionssecretstrufflehog+ 1github-actions

  Dockerfile

  •

  Apache License 2.0

  •9•17•1•0•Updated Nov 21, 2024Nov 21, 2024

• overseer

  Public
  Monitorable, gracefully restarting, self-upgrading binaries in Go (golang)

  Go

  •

  MIT License

  •215•7•0•1•Updated Nov 7, 2024Nov 7, 2024

• touchfile

  Public
  A reasonably simple locking mechanism between concurrent processes.

  Go

  •

  Apache License 2.0

  •0•1•0•0•Updated Oct 24, 2024Oct 24, 2024

• disk-buffer-reader

  Public
  Re-readable reader

  Go

  •

  MIT License

  •2•2•0•0•Updated Oct 22, 2024Oct 22, 2024

• private-key-reuse-checker

  Public
  Python

  •

  GNU Affero General Public License v3.0

  •0•0•0•0•Updated Sep 27, 2024Sep 27, 2024

• trufflehog-github-actions-example

  Public
  Demo of using the Trufflehog GitHub Action to automatically scan and update Pull Requests

  Python

  •6•1•0•4•Updated Aug 7, 2024Aug 7, 2024

• logwarden

  Public

  trufflesecurity/logwarden’s past year of commit activity
  Process all of your GCP audit logs against OPA Rego policies and alert for violations in real-time.

  Open Policy Agent

  •

  Apache License 2.0

  •2•7•0•7•Updated Jul 15, 2024Jul 15, 2024

• waas-client-library-go

  Public
  Coinbase Wallet as a Service (WaaS) Client Library in Go.

  Go

  •

  Other

  •68•1•0•1•Updated Jul 9, 2024Jul 9, 2024

• .github

  Public
  0•1•0•0•Updated Mar 6, 2024Mar 6, 2024

• gosnowflake

  Public
  Go Snowflake Driver

  Go

  •

  Apache License 2.0

  •158•1•0•0•Updated Feb 28, 2024Feb 28, 2024

• terraform-gcp-logwarden

  Public
  Terraform module for running Logwarden in GCP

  Open Policy Agent

  •0•0•0•4•Updated Dec 18, 2023Dec 18, 2023

• WhoAmISlack

  Public
  Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.

  Python

  •1•41•0•0•Updated Dec 12, 2023Dec 12, 2023

• test_keys_internal

  Public archive
  Internal fork of test_keys used to test certain auth scenarios

  63•0•0•0•Updated Oct 19, 2023Oct 19, 2023

• hacktoberfest2023

  Public
  Improve TruffleHog to win a laptop!

  2•3•0•0•Updated Oct 5, 2023Oct 5, 2023