trufflehog

v3.95.9 Feature

This release adds 7 notable features for engineering teams evaluating rollout.

Published 17d Vulnerability Scanning

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

credentials security dynamic-analysis precommit scanning secret

+4 more

secrets-management security-tools trufflehog verification

Summary

AI summary

Updates feat, fix, and action across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Feature
Feature	Low	Adds OpenRouter detector. Adds OpenRouter detector. Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Low	Adds New Relic Insights Insert key detector. Adds New Relic Insights Insert key detector. Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Low	Adds Duffel Token Detector. Adds Duffel Token Detector. Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Low	Adds Shippo detector. Adds Shippo detector. Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Low	Adds IPinfo detector to default detectors list. Adds IPinfo detector to default detectors list. Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Low	Adds improved lob detector to defaults.go. Adds improved lob detector to defaults.go. Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Low	Adds batch token detector. Adds batch token detector. Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Low	Adds image input to allow registry mirror overrides in actions. Adds image input to allow registry mirror overrides in actions. Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Low	Supports archived repo exclusion from GitHub org scans. Supports archived repo exclusion from GitHub org scans. Source: llm_adapter@2026-07-16 Confidence: high	—
Bugfix	Medium	Rejects --include-repos/--exclude-repos when --repo is used in GitHub scans. Rejects --include-repos/--exclude-repos when --repo is used in GitHub scans. Source: llm_adapter@2026-07-16 Confidence: high	—

Full changelog

What's Changed

feat: add OpenRouter detector by @McPatate in https://github.com/trufflesecurity/trufflehog/pull/4500
Integrations fully codeowns detectors by @trufflesteeeve in https://github.com/trufflesecurity/trufflehog/pull/5104
[INS-332] Add New Relic Insights Insert key detector by @mustansir14 in https://github.com/trufflesecurity/trufflehog/pull/4778
[INS-351] Added Duffel Token Detector by @MuneebUllahKhan222 in https://github.com/trufflesecurity/trufflehog/pull/4795
[INS-341] Added Shippo detector by @MuneebUllahKhan222 in https://github.com/trufflesecurity/trufflehog/pull/4820
[INS-467] Add IPinfo detector to default detectors list by @mustansir14 in https://github.com/trufflesecurity/trufflehog/pull/4970
fix: reject --include-repos/--exclude-repos with --repo in github scan by @kashifkhan0771 in https://github.com/trufflesecurity/trufflehog/pull/5112
[INS-468] Add improved lob detector to defaults.go by @mustansir14 in https://github.com/trufflesecurity/trufflehog/pull/4971
feat(action): add image input to allow registry mirror overrides by @eightseventhreethree in https://github.com/trufflesecurity/trufflehog/pull/4965
feat: Support archived repo exclusion from GH org scans by @hibare in https://github.com/trufflesecurity/trufflehog/pull/4875
[INT-715] Retry transient failures when verifying OpenAI keys by @bill-rich in https://github.com/trufflesecurity/trufflehog/pull/5117
[INS-410] Added batch token detector by @MuneebUllahKhan222 in https://github.com/trufflesecurity/trufflehog/pull/4824
[INT-650] Don't log as error when git diff is too long by @bill-rich in https://github.com/trufflesecurity/trufflehog/pull/5113

New Contributors

@McPatate made their first contribution in https://github.com/trufflesecurity/trufflehog/pull/4500
@eightseventhreethree made their first contribution in https://github.com/trufflesecurity/trufflehog/pull/4965

Full Changelog: https://github.com/trufflesecurity/trufflehog/compare/v3.95.8...v3.95.9

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track trufflehog

Get notified when new releases ship.

About trufflehog

Find, verify, and analyze leaked credentials

All releases →