207  trufflehog(1) - Kailash Tool Reference

207.1 trufflehog

trufflehog - Secret scanner — hunts leaked AI-provider keys in repos and paths (A-1 AI-key hunting; C-8 classic secret scanning).

Layer ATTACK
Category a-01-ai-recon
Safety class safe
Licence AGPL-3.0-only
Upstream github.com/trufflesecurity/trufflehog

207.1.1 NAME

trufflehog - Secret scanner — hunts leaked AI-provider keys in repos and paths (A-1 AI-key hunting; C-8 classic secret scanning).

207.1.2 SYNOPSIS & usage

Derived from the upstream README at generation time; verify against --help where the tool is installed.

docker run --rm -it -v "$PWD:/pwd" trufflesecurity/trufflehog:latest github --org=trufflesecurity
brew install trufflehog

207.1.3 DESCRIPTION (upstream)

…and more To learn more about TruffleHog and its features and capabilities, visit our product page. Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint (and more) for credentials? We have an enterprise product that can help! Learn more at https://trufflesecurity.com/trufflehog-enterprise. We take the revenue from the enterprise product to fund more awesome open source projects that the whole community can benefit from. TruffleHog is the most powerful secrets **Discovery, Classification, Vali

207.1.4 CONFIGURATION (detected)

Config-surface markers detected in the upstream README (4 matches, e.g. --config, --config). A full config reference page for this tool is queued under the config-page policy — this line is the detection record, not the page.

207.1.5 SEE ALSO

ref: pin - verified 2026-10-14