What is TruffleHog? ◆ Truffle Security Co.
Open-source scanner that hunts for secrets, passwords, and API keys buried in code repositories and commit history. Catches the mistakes developers make when they push credentials by accident. Runs locally or in CI/CD pipelines and supports multiple scanning backends. Worth running on any codebase that's been around long enough to accumulate careless commits.