trufflehog
Vulnerability ScanningA secrets discovery, classification, validation, and analysis tool that finds leaked credentials in code, chats, wikis, logs, and more.
Features
- Discovers secrets across Git repositories, chat platforms (Slack, Discord), wikis (Confluence), logs, API testing tools, object stores, and filesystems.
- Classifies over 800 secret types, mapping each to its originating service (e.g., AWS, Stripe, Cloudflare, PostgreSQL).
- Validates found secrets by attempting authentication to confirm if they are active and exploitable.
Recent releases
View all 25 releases →Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Install & Platforms
Install via
brew
docker
shell-script
binary
go
Platforms
linux
macos
arm64
windows
