trufflehog

Find credentials all over the place

Secrets Patterns DB: The largest open-source Database for detecting secrets, API keys, passwords, tokens, and more.

Private key usage verification

Yar is a tool for plunderin' organizations, users and/or repositories.

Secret and/or credential patterns used for gf.

truffleproc — hunt secrets in process memory (TruffleHog & gdb mashup)

convert secret patterns to gf compatible.

GitRoller: A Git Recon Tools

Find exposed credentials using GitHub Actions with TruffleHog Enterprise.

Repo for GitHub actions dockerfiles

Simple Tool Written In Python3 Works On Scraping User's Github Repositories And Pass Them Into trufflehog To Scan Them Against Possible Data Leaks.

Allows developers to upload and scan their code repositories for unintentionally-exposed secret keys/passwords (vulnerabilities) using RegEx identification and entropy calculation.

Git audit is a go package which can be used to audit git repository to find issues.

docker image containing trufflehog to use it in gitlab CI

Filter for some of trufflehog's false positives

Automating various Git SAST Scanner tools like trufflehog, gitleaks ,etc

Basic secret scanning with Trufflehog