git-all-secrets

git-all-secrets 关于 git-all-secrets 是一款能够执行以下操作的工具： 克隆某个组织的多个公共/私有 GitHub 仓库并进行扫描， 克隆组织中某个用户的多个公共/私有 GitHub 仓库并进行扫描， 克隆某个组织的单个公共/私有仓库并进行扫描， 克隆某个用户的单个公共/私有仓库并进行扫描， 克隆某个用户的单个公共/秘密 Gist 并进行扫描， 克隆组织中某个团队的所有仓库并进行扫描， 以上全部功能可以一起完成！没错！只需提供组织名称，即可获取该组织的所有秘密。如果你还想获取组织中某个团队的秘密，只需在组织名称旁注明团队名称。 同时支持克隆和扫描 GitHu...

trufflehog-explorer

TruffleHog Explorer 🕵️‍♂️ 欢迎使用 TruffleHog Explorer，一个用户友好的基于网页的工具，用于可视化和分析通过 TruffleHog 提取的数据。TruffleHog 是最强大的开源密钥发现、分类、验证和分析工具之一。在此上下文中，密钥是指机器用于向另一台机器进行身份验证的凭据，包括 API 密钥、数据库密码、私钥等。 凭借改进的 UI/UX、强大的过滤选项和导出功能，该工具可帮助安全专业人员高效审查存储库中发现的潜在密钥和凭据。 ⚠️ 此仪表板仅针对 GitHub TruffleHog JSON 输出进行了测试。预计很快会更新以支持更多格式和平台。...

rusty-hog

Rusty Hog 是一个用 Rust 构建的高性能秘密扫描器，基于用 Python 编写的 TruffleHog。Rusty Hog 提供以下二进制文件： Ankamali Hog: 扫描 Google 文档中的秘密。 Berkshire Hog: 扫描 S3 存储桶中的秘密。 Choctaw Hog: 扫描 Git 仓库中的秘密。 Duroc Hog: 扫描目录、文件和归档中的秘密。 Essex Hog: 扫描 Confluence Wiki 页面中的秘密。 Gottingen Hog: 扫描 JIRA 议题中的秘密。 Slack Hog: 扫描 Slack 频道中的秘密。 目录...

trufflehog

TruffleHog Find leaked credentials. 🔎 Now Scanning ...and more To learn more about TruffleHog and its features and capabilities, visit our product page. 🌐 TruffleHog Enterprise Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint and more for...

trufflehog

TruffleHog Find leaked credentials. 🔎 Now Scanning ...and more To learn more about TruffleHog and its features and capabilities, visit our product page. 🌐 TruffleHog Enterprise Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint and more for...

claudleak

claudleak Escanea repositorios públicos de GitHub en busca de credenciales filtradas en archivos de configuración de herramientas de codificación de IA .claude/, .cursor/, .continue/, .codex/, CLAUDE.md, AGENTS.md, etc.. Utiliza TruffleHog para la detección de secretos. Ejemplo de directorio...

GHSA-W6R9-248C-FRG8 vulnerabilities

Vulnerabilities for packages: trufflehog-fips, bento, argo-events-fips, bento-fips, argo-events, telegraf, falcosidekick, keda, trufflehog, krakend-fips, falcosidekick-fips, guac, krakend, keda-fips...

CVE-2026-107386 vulnerabilities

Vulnerabilities for packages: trufflehog-fips, bento, argo-events-fips, bento-fips, argo-events, telegraf, falcosidekick, keda, trufflehog, krakend-fips, falcosidekick-fips, guac, krakend, keda-fips...

driftwood

Driftwood ⚠️ Driftwood CLI 工具已不再受支持。请改用 TruffleHog！⚠️ Driftwood 是一个工具，可以让你查找某个私钥是否被用于 TLS 或作为某个用户的 GitHub SSH 密钥等用途。 Driftwood 使用计算出的公钥进行查找，因此私钥永远不会离开你运行工具的地方。此外，它还支持对加密密钥进行一些基础的密码破解。 你可以在此阅读更多相关信息 安装 三种简单的入门方式。 使用 Docker 运行 cat private.key | docker run --rm -i trufflesecurity/driftwood...

chart-down

chart-down Download and scan Helm charts for secrets using TruffleHog. Given a Helm repository URL, chart-down fetches the repo index, downloads every chart archive, extracts it, and runs TruffleHog against the contents. Requisitos Go 1.19+ TruffleHog en PATH brew install trufflehog Instalación g...

trufflehog v3.98.0

TruffleHog Find leaked credentials. 🔎 Now Scanning ...and more To learn more about TruffleHog and its features and capabilities, visit our product page. 🌐 TruffleHog Enterprise Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint and more for...

trufflehog v3.97.5

TruffleHog Find leaked credentials. 🔎 Now Scanning ...and more To learn more about TruffleHog and its features and capabilities, visit our product page. 🌐 TruffleHog Enterprise Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint and more for...

trufflehog v3.97.2

TruffleHog Find leaked credentials. 🔎 Now Scanning ...and more To learn more about TruffleHog and its features and capabilities, visit our product page. 🌐 TruffleHog Enterprise Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint and more for...

Boundary-Mutation Testing for Pattern-Based Secret Detection: A Rule-Level Method and Cross-Scanner Evaluation

Pattern-based secret scanners are commonly validated with example-based fixtures that fix one variable: the text surrounding a credential. We introduce boundary-mutation testing to vary that context, generating credentials from each rule's own regular expression, embedding them in realistic sourc...

git-alerts v1.8.0

GitAlerts What problem does it solve? GitHub repositories created under any organization can be controlled by the GitHub administrators. However any repository created under an organization's user account is not controllable unless the organisation has adopted the GitHub enterprise-managed user E...

trufflehog v3.97.0

TruffleHog Find leaked credentials. 🔎 Now Scanning ...and more To learn more about TruffleHog and its features and capabilities, visit our product page. 🌐 TruffleHog Enterprise Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint and more for...

GO-2025-4020 vulnerabilities

Vulnerabilities for packages: mattermost, k9s, mattermost-fips, k9s-fips, kots, trufflehog-fips, zarf, gotenberg, syft, syft-fips, grype-fips, grype, gitleaks, undock, gptscript, trufflehog, filebrowser, grype-db, chainctl, kubescape, chezmoi, wolfictl, cg, nuclei...

GO-2025-3922 vulnerabilities

Vulnerabilities for packages: trivy-operator, steampipe, envoy-gateway, undock, xeol, grafana-alloy, gitleaks, tflint, kubescape-operator, nuclei, nsc, opentofu, k9s, rancher-fleet, terragrunt, terraform, filebrowser, trufflehog, gptscript, podman, gitness, zot, guac, trivy, vcluster, zarf...

GO-2025-4020 vulnerabilities

Vulnerabilities for packages: kots, k9s, syft, wolfictl, gitleaks, nuclei, kubescape, filebrowser, trufflehog, undock, zarf, gptscript, chezmoi, grype...

GO-2025-3830 vulnerabilities

Vulnerabilities for packages: apko, buf, dagger, docker-cli-buildx, buildkitd, buildah, osv-scanner, syft, cadvisor, aws-otel-collector, nerdctl, openfga, opentelemetry-collector-contrib, docker-compose, splunk-otel-collector, falcoctl, spire-server, k9s, wolfictl, kargo, melange, trufflehog, zot...