Trufflehog
Scanner that hunts for leaked secrets in git repositories, filesystems and cloud storage. Trufflehog finds credentials, API keys and tokens, then verifies them against live services to confirm they actually work. Built for both one-off scans and continuous monitoring in CI/CD pipelines. Catches the mistakes developers make before attackers do.