TruffleHog

Use it when

• find and optionally verify exposed credentials across repositories and filesystems
• prioritize live secrets instead of reviewing every entropy match

What it solves

Not the fit when

• verification can contact providers and should be scoped deliberately

Install

brew install trufflehog

Invoke

trufflehog git file://. --only-verified

Alternatives

No reviewed alternatives recorded yet.