Identify known vulnerabilities in project dependencies
TruffleHog
Find leaked credentials hidden anywhere in code
About TruffleHog
TruffleHog searches for leaked credentials across git history, filesystems, cloud storage, and CI systems, verifying many secret types live. You can deploy it with common tooling such as Docker or a standard package install and integrate it with the systems you already run. Regular community releases, public issue trackers, and extensive documentation help new administrators get from a first install to daily use quickly.
TruffleHog key facts
- Category: Developer Tools
- Pricing: Freemium — a free tier lets you start, and paid plans are available if you need more.
- Focus areas: secrets, credentials, scanner, security
- Official site: trufflesecurity.com
About the Developer Tools category
Editors, platforms, and services developers rely on to build and ship software. The Developer Tools category on Tools Hub currently lists 738 tools. Alongside TruffleHog, it includes OWASP Dependency-Check, Retire.js, OWASP Dependency-Track, Renovate.
More in Developer Tools
Comparing tools in the Developer Tools category? These related listings are worth a look: OWASP Dependency-Check — Identify known vulnerabilities in project dependencies; Retire.js — Scanner for vulnerable JavaScript libraries; OWASP Dependency-Track — Software composition analysis with SBOM support.
Scanner for vulnerable JavaScript libraries
Software composition analysis with SBOM support
Automated dependency updates across repositories
Helps engineering teams draw architecture diagrams and write technical documents together.
Lets developers deploy web apps.