TruffleHog 凭据泄露扫描器
Find, verify, and analyze leaked credentials across Git repositories, Slack, Jira, Docker images, and more using TruffleHog. Classifies 800+ secret types and validates whether discovered credentials are live.
Installation
Use the upstream install or setup path that matches your environment:
- docker run --rm -it -v "$PWD:/pwd" trufflesecurity/trufflehog:latest github --org=trufflesecurity
- brew install trufflehog
- docker run --rm -it -v "$PWD:/pwd" trufflesecurity/trufflehog:latest github --repo https://github.com/1991513ccie-png/skills
- docker run --rm -it -v "%cd:/=\%:/pwd" trufflesecurity/trufflehog:latest github --repo https://github.com/1991513ccie-png/skills
Requirements and caveats from upstream:
- ### Docker:
- <sub><i>Ensure Docker engine is running before executing the following commands:</i></sub>
- ### Using installation script, verify checksum signature (requires cosign to be installed)
Basic usage or getting-started notes:
- # :rocket: Quick Start
- Clone the git repo. For example test keys repo.
- Source: https://github.com/1991513ccie-png/skills
- Extracted from upstream docs: https://raw.githubusercontent.com/trufflesecurity/trufflehog/HEAD/README.md
