Using TruffleHog and pre-commit hook to prevent secret exposure

1. trufflehog

   1 33 19,806 9.8 Go

   Find, verify, and analyze leaked credentials

   

   Here for Linux and Windows users

2. Stream

   getstream.io featured

   Stream - Scalable APIs for Chat, Feeds, Moderation, & Video. Stream helps developers build engaging apps that scale to millions with performant and flexible Chat, Feeds, Moderation, and Video APIs and SDKs powered by a global edge network and enterprise-grade infrastructure.

   

3. pre-commit

   2 208 13,996 7.4 Python

   A framework for managing and maintaining multi-language pre-commit hooks.

   

   I'm using pre-commit, follow the link to get installation instructions.

4. demo-trufflehog

   3 1 1 4.6 Python

   

   $ git add . $ git commit -m "Try to add a hard-coded secret" TruffleHog...............................................................Failed - hook id: trufflehog - exit code: 183 🐷🔑🐷 TruffleHog. Unearth your secrets. 🐷🔑🐷 2024-07-25T15:07:13+02:00 info-0 trufflehog running source {"source_manager_worker_id": "gWFQC", "with_units": true} 2024-07-25T15:07:13+02:00 info-0 trufflehog scanning repo {"source_manager_worker_id": "gWFQC", "unit": ".", "unit_kind": "dir", "repo": "https://github.com/rafaelherik/demo-trufflehog.git", "base": "7e7de59764df7420fc94897219c7dc55bf33a32e"} Found unverified result 🐷🔑❓ Detector Type: Github Decoder Type: PLAIN Raw result: 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 Rotation_guide: https://howtorotate.com/docs/tutorials/github/ Version: 2 Commit: Staged File: src/main.py Line: 30 Repository: https://github.com/rafaelherik/demo-trufflehog.git Timestamp: 0001-01-01 00:00:00 +0000 2024-07-25T15:07:13+02:00 info-0 trufflehog finished scanning {"chunks": 2, "bytes": 212, "verified_secrets": 0, "unverified_secrets": 1, "scan_duration": "20.145917ms", "trufflehog_version": "3.80.1"}

Suggest a related project