GStars
    trufflesecurity

    trufflesecurity/trufflehog

    Find, verify, and analyze leaked credentials

    security
    credentials
    devsecops
    dynamic-analysis
    precommit
    scanning
    Go
    AGPL-3.0
    29.2K stars
    2.7K forks
    212 GitHub watchers
    Updated Nov 11, 2026
    View on GitHub

    Build with Backblaze B2

    SDKs, agent skills, IDE extensions, and reference pipelines from Backblaze Labs. All open source.

    Explore Backblaze Labs

    Loading star history...

    Where it stands

    Rank, growth pace and release cadence relative to everything GStars tracks.

    5 releases in the last 90 days, the latest 8 days ago, with 212 contributors on GitHub.

    Peaked at #14 in the weekly ranking the week of Sep 14, its best in the past year.

    Use Cases & Benefits

    • Find, verify, classify, and analyze leaked credentials across various data sources including Git repos, cloud storage, chat platforms, and more.
    • Provides active verification of over 700 credential types against their APIs to eliminate false positives and confirm live secrets.
    • Use for scanning GitHub repositories and organizations to detect and validate exposed secrets in code and commit history.
    • Use for continuous monitoring of cloud storage buckets like AWS S3 or Google Cloud Storage for leaked credentials using IAM roles.
    • Use for integrating secret scanning into CI/CD pipelines with GitHub Actions or pre-commit hooks to prevent credential leaks before deployment.

    Should you depend on it?

    License terms, project hygiene and risks, from GitHub metadata and GStars' snapshots.

    License

    AGPL 3.0

    Network copyleft: like the GPL, and also triggered by offering the software over a network.

    Community files

    • README: present
    • Contributing guide: present
    • Code of conduct: present

    Watch-outs

    • AGPL-style copyleft also applies when the software is offered over a network.

    General guidance from repository metadata, not legal advice. How we score

    From the README

    Find leaked credentials.

    To learn more about TruffleHog and its features and capabilities, visit our product page.

    Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint, and more.. for credentials? We have an enterprise product that can help! Learn more at https://trufflesecurity.com/trufflehog-enterprise.

    We take the revenue from the enterprise product to fund more awesome open source projects that the whole community can benefit from.

    Excerpt from the trufflesecurity/trufflehog README on GitHub (AGPL-3.0 license). © its authors.Read the full README on GitHub

    Daily snapshots

    Stars gained per day, and how forks and open issues moved, from GStars' daily snapshots

    Aug 14: +22Aug 15: +16Aug 16: +7Sep 12: +42Sep 13: +22Sep 14: +15Sep 19: +5Sep 28: +26Oct 2: +12Oct 3: +16Oct 4: +21Oct 5: +14Oct 6: +14Oct 7: +18Oct 8: +39Oct 9: +32Oct 10: +18Oct 11: +16Oct 12: +13Oct 13: +24Oct 14: +29Oct 15: +21Oct 16: +15Oct 17: +11Oct 18: +17Oct 19: +18Oct 20: +20Oct 21: +20Oct 22: +16Oct 23: +22Oct 24: +23Oct 25: +13Oct 26: +13Oct 27: +15Oct 28: +20Nov 11: +72

    +1,736 stars over 90 days across 44 snapshot days; best day +72 on Nov 11.

    Forks

    2.7K+183

    Open issues

    604+90

    Compared with peers in Security

    Fastest-growing repositories GStars tracks in this cohort for the week of Nov 8, by 7-day star growth

    View category →
    trufflesecurity/trufflehog compared with Security repositories by stars, 7-day star growth, health score and last release
    RepositoryStars+7dHealthLast release
    cloudflare/security-audit-skill69.3K+10.7K75—
    vxcontrol/pentagi33.9K+7197536 days ago
    GyulyVGC/sniffnet42.3K+42275111 days ago
    soxoj/maigret39.9K+3326087 days ago
    Asymptote-Labs/agent-beacon3.4K+315751 day ago
    trufflesecurity/trufflehog29.2K—758 days ago
    Category median39.9K+42275—
    Compare trufflehog with security-audit-skill, pentagi, sniffnet →

    Discover Repositories

    Search across tracked repositories by name or description