Find leaked credentials.
--- [](https://github.com/trufflesecurity/trufflehog/actions) [](https://goreportcard.com/report/github.com/trufflesecurity/trufflehog) [](https://hub.docker.com/r/trufflesecurity/trufflehog/)  --- ## Join The Slack Have questions? Feedback? Jump in slack and hang out with us https://join.slack.com/t/trufflehog-community/shared_invite/zt-pw2qbi43-Aa86hkiimstfdKH9UCpPzQ ## Demo  ```bash docker run -it -v "$PWD:/pwd" trufflesecurity/trufflehog:latest github --org=trufflesecurity ``` # What's new in v3? TruffleHog v3 is a complete rewrite in Go with many new powerful features. - We've **added over 600 credential detectors that support active verification against their respective APIs**. - We've also added native **support for scanning GitHub, GitLab, filesystems, and S3**. ## What is credential verification? For every potential credential that is detected, we've painstakingly implemented programatic verification against the API that we think it belongs to. Verification eliminates false positives. For example, the [AWS credential detector](pkg/detectors/aws/aws.go) performs a `GetCallerIdentity` API call against the AWS API to verify if an AWS credential is active. ## Installation Several options: ### 1. Go ``` git clone https://github.com/trufflesecurity/trufflehog.git cd trufflehog; go install ``` ### 2. [Release binaries](https://github.com/trufflesecurity/trufflehog/releases) ### 3. Docker > Note: Apple M1 hardware users should run with `docker run --platform linux/arm64` for better performance. #### **Most users** ```bash docker run -it -v "$PWD:/pwd" trufflesecurity/trufflehog:latest github --repo https://github.com/trufflesecurity/test_keys ``` #### **Apple M1 users** The `linux/arm64` image is better to run on the M1 than the amd64 image. Even better is running the native darwin binary avilable, but there is not container image for that. ```bash docker run --platform linux/arm64 -it -v "$PWD:/pwd" trufflesecurity/trufflehog:latest github --repo https://github.com/trufflesecurity/test_keys ``` ### 4. Pip (help wanted) It's possible to distribute binaries in pip wheels. Here is an example of a [project that does it](https://github.com/Yelp/dumb-init). Help with setting up this packaging would be appreciated! ### 5. Brew (help wanted) We'd love to distribute via brew and could use your help. ## Usage TruffleHog has a sub-command for each source of data that you may want to scan: - git - github - gitlab - S3 - filesystem - file and stdin Each subcommand can have options that you can see with the `-h` flag provided to the sub command: ``` $ trufflehog git --help usage: TruffleHog git [