Skip to content

trufflehog

v3.95.6 Feature

This release adds 3 notable features for engineering teams evaluating rollout.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

credentials security dynamic-analysis precommit scanning secret
+4 more
secrets-management security-tools trufflehog verification

Affected surfaces

auth

Summary

AI summary

Fixes line‑length scanning, honors ignore tags in PostgreSQL URLs, and surfaces S3 bucket listing failures.

Full changelog

What's Changed

  • Enigma detector enhance verification to prevent false verified findings by @shahzadhaider1 in https://github.com/trufflesecurity/trufflehog/pull/5011
  • fix: scan files with lines exceeding bufio's default 64 KB token limit by @MuneebUllahKhan222 in https://github.com/trufflesecurity/trufflehog/pull/5022
  • fix(postgres): honor ignore tags for default port URLs by @Dawn-Fighter in https://github.com/trufflesecurity/trufflehog/pull/4968
  • Move to github.com/moby/moby/client from docker/docker by @trufflesteeeve in https://github.com/trufflesecurity/trufflehog/pull/4987
  • fix: avoid terminal probes before CLI output by @Hackerchen716 in https://github.com/trufflesecurity/trufflehog/pull/4994
  • Update test containers dependency by @trufflesteeeve in https://github.com/trufflesecurity/trufflehog/pull/4978
  • Re-host pkg/handlers JSON test fixtures under the org by @amanfcp in https://github.com/trufflesecurity/trufflehog/pull/5023
  • [INS-465] Add datadogapikey detector to defaults.go by @mustansir14 in https://github.com/trufflesecurity/trufflehog/pull/4969
  • [INS-470] Add Tly detector to defaults.go, gate it behind feat flag and update its verification logic by @MuneebUllahKhan222 in https://github.com/trufflesecurity/trufflehog/pull/5006
  • [INS-473] Add wit detector to defaults.go, gate it behind feat flag and update verification logic by @MuneebUllahKhan222 in https://github.com/trufflesecurity/trufflehog/pull/5008
  • Updating Klaviyo PK new format by @breetan in https://github.com/trufflesecurity/trufflehog/pull/5009
  • Restructure Klaviyo detector pattern tests by @martinlocklear in https://github.com/trufflesecurity/trufflehog/pull/5026
  • Replace Renovate config with shared preset (high-risk tier) by @bryanbeverly in https://github.com/trufflesecurity/trufflehog/pull/4992
  • set redacted value to last 4 characters of secret, to match how the secret type admin interface displays it by @jordanTunstill in https://github.com/trufflesecurity/trufflehog/pull/5027
  • GitHub finegrained analyzer was improperly handling errors by @dustin-decker in https://github.com/trufflesecurity/trufflehog/pull/4498
  • [INS-469] Added Rev detectors to defaults.go and gated it behind feature flag by @MuneebUllahKhan222 in https://github.com/trufflesecurity/trufflehog/pull/5005
  • Fix Renovate lookup: update setup-captain version comment by @bryanbeverly in https://github.com/trufflesecurity/trufflehog/pull/4999
  • [INS-472] [INS-515] Add user detector to defaults.go, gate it behind feat flag, update verification logic and add custom ep configuration by @MuneebUllahKhan222 in https://github.com/trufflesecurity/trufflehog/pull/5007
  • Fix: Resolve known dedup issues in notifierWorker by @MuneebUllahKhan222 in https://github.com/trufflesecurity/trufflehog/pull/5028
  • fix(dropbox): prevent long sl.u. tokens from being truncated by @lukem-ts in https://github.com/trufflesecurity/trufflehog/pull/5012
  • fix: add filetype=sdist param to pypi detector by @lukem-ts in https://github.com/trufflesecurity/trufflehog/pull/4988
  • Handlers - Embed small HTTP test fixtures by @amanfcp in https://github.com/trufflesecurity/trufflehog/pull/5001
  • S3: surface bucket listing failures and fix multi-role object count by @shahzadhaider1 in https://github.com/trufflesecurity/trufflehog/pull/5035

New Contributors

  • @Dawn-Fighter made their first contribution in https://github.com/trufflesecurity/trufflehog/pull/4968
  • @Hackerchen716 made their first contribution in https://github.com/trufflesecurity/trufflehog/pull/4994
  • @breetan made their first contribution in https://github.com/trufflesecurity/trufflehog/pull/5009
  • @lukem-ts made their first contribution in https://github.com/trufflesecurity/trufflehog/pull/5012

Full Changelog: https://github.com/trufflesecurity/trufflehog/compare/v3.95.4...v3.95.6

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track trufflehog

Get notified when new releases ship.

Sign up free

About trufflehog

Find, verify, and analyze leaked credentials

All releases →

Related context

Earlier breaking changes

  • v3.95.3 AnalysisInfo field renamed to SecretParts on Result API

Beta — feedback welcome: [email protected]