trufflesecurity/trufflehog

Fork 0

Files

T

History

Zachary Rice 853e1e8d24

Lint / golangci-lint (push) Waiting to run

Lint / semgrep (push) Waiting to run

Release / Release (push) Waiting to run

Scan for secrets / test (push) Waiting to run

Test / test (push) Waiting to run

Test / test-community (push) Waiting to run

Support exclude regexes, excludewords, and entropy filters for custom detectors (#3860 )

* Simple implementation of exclude regexes, stopwords, and entropy checks for customdetectors

* better name

* readme blurb and example

* link

2025-01-30 12:34:07 -06:00

generic_with_filters.yml

Support exclude regexes, excludewords, and entropy filters for custom detectors (#3860 )

2025-01-30 12:34:07 -06:00

generic.yml

examples folder (#1734 )

2023-09-22 15:26:20 -05:00

README.md

Update README.md (#1811 )

2023-09-22 16:51:14 -05:00

README.md

Examples

This folder contains various examples like custom detectors, scripts, etc. Feel free to contribute!

Generic Detector

An often requested feature for TruffleHog is a generic detector. By default, we do not support generic detection as it would result in lots of false positives. However, if you want to attempt detect generic secrets you can use a custom detector.

Try it out:

wget https://raw.githubusercontent.com/trufflesecurity/trufflehog/main/examples/generic.yml
trufflehog filesystem --config=$PWD/generic.yml $PWD

# to filter so that _only_ generic credentials are logged:
trufflehog filesystem --config=$PWD/generic.yml --json --no-verification $PWD | awk '/generic-api-key/{print $0}'