380  trufflehog - configuration reference

381 trufflehog — configuration reference

Configuration surfaces for trufflehog (safety class: safe; category: a-01-ai-recon) — detected from the upstream documentation at generation time (4 config-surface markers). The invocation reference stays on the main tool page.

381.1 Configuration files

Path	Context
examples/generic_with_filters.yml	hen the filters get applied to each regex. Here is an example of a custom detector
examples/generic_config_secrets.yml	verified detectors won’t otherwise catch. Here is an example tuned for that use c

381.2 Environment variables

Variable	Upstream context
SCAN_PATH	llow_failure: false image: alpine:latest variables: SCAN_PATH: “.” # Set the relative path in the repo to scan before_s

Names extracted heuristically from upstream docs — verify each against the tool’s own docs before use.

381.3 Sample configuration (upstream)

trufflehog gcs --project-id=<project-ID> --cloud-environment --results=verified

sources:
- connection:
    '@type': type.googleapis.com/sources.GitHub
    repositories:
    - https://github.com/trufflesecurity/test_keys.git
    unauthenticated: {}
  name: example config scan
  type: SOURCE_TYPE_GITHUB
  verify: true

---

ref: pin - verified 2026-10-14