trufflehog3 1.0.10

Find secrets in your codebase.

truffleHog3

This is an enhanced version of truffleHog scanner

New

• Python 3.6
• flake8 compliant code
• output to file option
• option to disable Git history checks - scan simple files/folders
• option to exclude files/directories
• config file support with automatic detection of trufflehog.json config in source code directory

Installation

Package is available on PyPI

pip install truffleHog3

Customizing

List of regexes was moved into repository, see regexes.json

Help

usage: trufflehog3 [options] source

Find secrets in your codebase.

positional arguments:
  source              URL or local path for secret searching

optional arguments:
  -h, --help          show this help message and exit
  -c, --config        path to config file
  -r, --rules         ignore default regexes and source from json
  -o, --output        write report to file
  -b, --branch        name of the branch to be scanned
  -m, --max-depth     max commit depth for searching
  -s, --since-commit  scan starting from a given commit hash
  --json              output in JSON
  --exclude           exclude paths from scan
  --whitelist         skip matching strings
  --no-regex          disable high signal regex checks
  --no-entropy        disable entropy checks
  --no-history        disable commit history check

Thanks

Special thanks to Dylan Ayrey (@dxa4481), developer of the original truffleHog scanner