truffleHog Files

Searches through git repositories for high entropy strings and secrets

This is an exact mirror of the truffleHog project, hosted at https://github.com/trufflesecurity/truffleHog. SourceForge is not affiliated with truffleHog. For more information, see the SourceForge Open Source Mirror Directory.

The interactive file manager requires Javascript. Please enable it or use sftp or scp.
You may still browse the files here.

Name	Modified	Size	InfoDownloads / Week
Parent folder
trufflehog_3.90.12_checksums.txt.pem	2025-10-27	3.3 kB	0
trufflehog_3.90.12_checksums.txt	2025-10-27	630 Bytes	0
trufflehog_3.90.12_checksums.txt.sig	2025-10-27	96 Bytes	0
trufflehog_3.90.12_darwin_amd64.tar.gz	2025-10-27	70.0 MB	0
trufflehog_3.90.12_darwin_arm64.tar.gz	2025-10-27	67.0 MB	0
trufflehog_3.90.12_linux_amd64.tar.gz	2025-10-27	33.0 MB	0
trufflehog_3.90.12_linux_arm64.tar.gz	2025-10-27	28.2 MB	0
trufflehog_3.90.12_windows_amd64.tar.gz	2025-10-27	70.0 MB	2
trufflehog_3.90.12_windows_arm64.tar.gz	2025-10-27	65.2 MB	0
README.md	2025-10-22	1.1 kB	0
v3.90.12 source code.tar.gz	2025-10-22	4.1 MB	0
v3.90.12 source code.zip	2025-10-22	7.5 MB	12
Totals: 12 Items		345.1 MB	14

What's Changed

Updated Docker source with new test cases and README by @kashifkhan0771 in https://github.com/trufflesecurity/trufflehog/pull/4481
Comment out broken CircleCI integration test by @trufflesteeeve in https://github.com/trufflesecurity/trufflehog/pull/4505
Fix "skipping binary file" logging to show actual file name by @mariduv in https://github.com/trufflesecurity/trufflehog/pull/4509
Refactored circleci source test cases by @kashifkhan0771 in https://github.com/trufflesecurity/trufflehog/pull/4506
added ability to run github-experimental against private repos by @joeleonjr in https://github.com/trufflesecurity/trufflehog/pull/4508
explicit repositories now bypass wantRepo() filtering entirely. added ctx to newConnector by @jordanTunstill in https://github.com/trufflesecurity/trufflehog/pull/4507
Remove include repos by @jordanTunstill in https://github.com/trufflesecurity/trufflehog/pull/4469
Remove depaware by @rosecodym in https://github.com/trufflesecurity/trufflehog/pull/4515

Full Changelog: https://github.com/trufflesecurity/trufflehog/compare/v3.90.11...v3.90.12

Source: README.md, updated 2025-10-22

Other Useful Business Software

Level Up Your Cyber Defense with External Threat Management Icon

Level Up Your Cyber Defense with External Threat Management

See every risk before it hits. From exposed data to dark web chatter. All in one unified view.

Move beyond alerts. Gain full visibility, context, and control over your external attack surface to stay ahead of every threat.

Try for Free

MongoDB Atlas runs apps anywhere Icon

MongoDB Atlas runs apps anywhere

Deploy in 115+ regions with the modern database for every enterprise.

MongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.

Start Free

Recommended Projects

Talisman
Talisman is a tool that installs a hook to your repository to ensure that potential secrets or sensitive information do not leave the developer's workstation. It validates the outgoing changeset for things that look suspicious - such as potential SSH keys, authorization tokens, private keys etc....
git-secret
There’s a well-known issue with deploying and configuring software on servers: generally, you have to store your private data (such as database passwords, application secret-keys, OAuth secret keys, etc) outside of the git repository. If you do choose to store these secrets unencrypted in your...
Authenticator
Authenticator generates two-factor authentication (2FA) codes in your browser. Use it to add an extra layer of security to your online accounts. Always keep a backup of your secrets in a safe location. Encrypting your secrets is strongly recommended, especially if you are logged into a Google...
Semgrep
Static analysis at ludicrous speed. Find bugs and enforce code standards. Find and prevent security issues in Terraform, Docker, Kubernetes, nginx, and AWS configs before they go into production. Go beyond application code and protect the entire stack with a breadth of scanning capabilities....
PCSecrets
PCSecrets is a PC application that holds secret text data - protected by a master password and strong encryption. Use it as a password manager or just somewhere to hold any text data securely in one place. It can hold a second, hidden set of secrets that is undetectable and plausibly...