{"categories":[{"label":"Security","url":"https://skillfed.io/packages/category/security/3"}],"enrichment":{"capability":"Scans Git repositories and source code for secrets, API keys, and other sensitive data using pattern matching, with support for custom rules and incremental scanning.","skillfed_tags":["secret-scanning","git-security","credential-detection"],"use_cases":["Scan a Git repository's commit history to find accidentally committed secrets before they reach production.","Generate an HTML report of secrets found in a codebase for security review and remediation tracking.","Run incremental scans against a baseline to identify only new credential exposures in ongoing CI/CD pipelines.","Exclude known false positives using inline nosecret comments or custom rule configuration.","Scan a local directory without Git history to quickly check current source code for hardcoded credentials."],"what_it_does":"Trufflehog3 is a secret scanner that searches Git repositories and source code for exposed credentials, API keys, and other sensitive data. It uses pattern-based detection to identify secrets in commit history, current files, or both, and can output results in multiple formats including JSON and interactive HTML reports.\n\nThe package is built on GitPython, Jinja2, and PyYAML, allowing it to clone remote repositories, parse configuration files, and generate formatted reports. It supports custom detection rules via YAML configuration, inline exclusion comments to suppress false positives, multiprocessing for faster scans, and incremental scanning against baseline reports to track new issues only.","worth_installing":"Yes, if you need secret detection in Git repositories and can accept the aging maintenance status. The package is stable and has no known vulnerabilities, but the last release was over a year ago and there is no recent development activity. Suitable for one-off scans or CI/CD integration where active updates are not critical; reconsider if you require ongoing security rule updates or active maintainer support."},"id":"trufflehog3","links":{"html":"https://skillfed.io/packages/trufflehog3","md":"https://skillfed.io/packages/trufflehog3.md","pypi":"https://pypi.org/project/trufflehog3/"},"maintenance":{"status":"aging"},"meta":{"latest_release":"2024-05-24","license_spdx":null,"license_treatment":"unclear","name":"trufflehog3","python_support":"supports_current","summary":"Find secrets in your codebase"},"popularity":{"monthly_downloads":89620,"position":13643,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"3.0.10"}