1 repo
Customizable patterns and triggers for identifying sensitive information in code or configuration.
Distinguishing note: Focuses on the definition of detection logic rather than the scanning engine itself.
Explore 1 awesome GitHub repository matching security & cryptography · Secret Detection Rules. Refine with filters or upvote what's useful.
Trufflehog is a security tool designed to continuously monitor code repositories and cloud environments to detect, verify, and remediate exposed sensitive credentials and API keys. It functions as a comprehensive secret scanning engine that integrates directly into deployment pipelines and version control systems to intercept sensitive data before it is committed or pushed. By utilizing read-only operations and volatile memory processing, the system ensures that discovered credentials are never stored persistently, maintaining strict data privacy throughout the scanning lifecycle. The platfor
Enables the creation of custom detection rules using regex and keyword triggers to validate potential secrets.