TruffleHog — поиск утёкших секретов в коде

★ 27.3K

TruffleHog is an open-source tool that finds leaked secrets: API keys, database passwords, private encryption keys and other credentials that ended up where they should not be. Reach for it to check whether someone left a key in the code: it scans the whole git history (not just the current version, where a secret may have been deleted but still lives in past commits), as well as chats, wikis, logs and cloud storage. What sets it apart from plain pattern search is validation: it does not merely find something key-shaped but checks whether it still works, cutting out false positives. It plugs into a build pipeline so a key never reaches a shared repository. An essential security-hygiene tool for any team handling sensitive data.

• #Security