[
  {
    "id": "trufflehog-docs-1",
    "tier": "claimed-docs",
    "url": "https://trufflesecurity.com/trufflehog",
    "excerpt": "trufflehog github --only-verified --repo https://github.com/trufflesecurity/test_keys",
    "fetchedAt": "2026-09-03T23:47:37.809Z"
  },
  {
    "id": "trufflehog-docs-2",
    "tier": "claimed-docs",
    "url": "https://trufflesecurity.com/docs",
    "excerpt": "trufflehog classifies over 800 secret types, mapping them back to the specific identity they belong to",
    "fetchedAt": "2026-09-03T23:47:37.809Z"
  },
  {
    "id": "trufflehog-docs-3",
    "tier": "claimed-docs",
    "url": "https://trufflesecurity.com/docs",
    "excerpt": "for every secret trufflehog can classify, it can also log in to confirm if that secret is live or not",
    "fetchedAt": "2026-09-03T23:47:37.809Z"
  },
  {
    "id": "trufflehog-docs-4",
    "tier": "claimed-docs",
    "url": "https://trufflesecurity.com/docs",
    "excerpt": "who created it? what resources can it access? what permissions does it have on those resources?",
    "fetchedAt": "2026-09-03T23:47:37.809Z"
  },
  {
    "id": "trufflehog-docs-5",
    "tier": "claimed-docs",
    "url": "https://trufflesecurity.com/docs/pre-commit-hooks.md",
    "excerpt": "Pre-commit hooks are a useful way to prevent secrets in code from being pushed from a git repository.",
    "fetchedAt": "2026-09-03T23:47:37.809Z"
  },
  {
    "id": "trufflehog-docs-6",
    "tier": "claimed-docs",
    "url": "https://trufflesecurity.com/docs/custom-detectors.md",
    "excerpt": "The custom regex detector allows you to define your own detector using regular expressions with optional verification using a webhook.",
    "fetchedAt": "2026-09-03T23:47:37.809Z"
  },
  {
    "id": "trufflehog-docs-7",
    "tier": "claimed-docs",
    "url": "https://trufflesecurity.com/docs/customizing-detection.md",
    "excerpt": "You can manually specify which detectors to use with the `--include-detectors` flag.",
    "fetchedAt": "2026-09-03T23:47:37.809Z"
  },
  {
    "id": "trufflehog-docs-8",
    "tier": "claimed-docs",
    "url": "https://trufflesecurity.com/docs/customizing-detection.md",
    "excerpt": "this trufflehog invocation will force verification for AWS and Buildkite secrets, irrespective of whether the configured sources have their verify flag set",
    "fetchedAt": "2026-09-03T23:47:37.809Z"
  },
  {
    "id": "trufflehog-docs-9",
    "tier": "claimed-docs",
    "url": "https://trufflesecurity.com/docs/analyzers.md",
    "excerpt": "TruffleHog Analyze evaluates access patterns to identify a secret’s metadata, permissions, and resources.",
    "fetchedAt": "2026-09-03T23:47:37.809Z"
  },
  {
    "id": "trufflehog-gh-1",
    "tier": "github",
    "url": "https://github.com/trufflesecurity/trufflehog",
    "excerpt": "brew install trufflehog",
    "fetchedAt": "2026-09-03T23:47:37.809Z"
  },
  {
    "id": "trufflehog-docs-10",
    "tier": "claimed-docs",
    "url": "https://trufflesecurity.com/docs/getting-started.md",
    "excerpt": "By the end, you'll have a running scanner, your first source connected, and findings flowing into the web UI.",
    "fetchedAt": "2026-09-03T23:47:37.809Z"
  },
  {
    "id": "trufflehog-docs-11",
    "tier": "claimed-docs",
    "url": "https://trufflesecurity.com/docs/getting-started.md",
    "excerpt": "Route findings to Slack, Jira, email, or webhooks so the right people can act on them.",
    "fetchedAt": "2026-09-03T23:47:37.809Z"
  },
  {
    "id": "trufflehog-docs-12",
    "tier": "claimed-docs",
    "url": "https://trufflesecurity.com/trufflehog",
    "excerpt": "TruffleHog scans beyond code repositories to identify secrets hidden in comments, Docker images, and more.",
    "fetchedAt": "2026-09-03T23:47:37.809Z"
  },
  {
    "id": "trufflehog-docs-13",
    "tier": "claimed-docs",
    "url": "https://trufflesecurity.com/docs/pre-commit-hooks.md",
    "excerpt": "trufflehog git file://. --since-commit HEAD --results=verified,unknown --fail",
    "fetchedAt": "2026-09-03T23:49:13.318Z"
  },
  {
    "id": "trufflehog-gh-2",
    "tier": "github",
    "url": "https://github.com/trufflesecurity/trufflehog",
    "excerpt": "docker run --rm -it -v \"$PWD:/pwd\" trufflesecurity/trufflehog:latest github --org=trufflesecurity",
    "fetchedAt": "2026-09-03T23:49:13.318Z"
  },
  {
    "id": "trufflehog-gh-3",
    "tier": "github",
    "url": "https://github.com/trufflesecurity/trufflehog",
    "excerpt": "For every secret TruffleHog can classify, it can also log in to confirm if that secret is live or not.",
    "fetchedAt": "2026-09-03T23:49:13.318Z"
  },
  {
    "id": "trufflehog-gh-4",
    "tier": "github",
    "url": "https://github.com/trufflesecurity/trufflehog",
    "excerpt": "instead of sending one request to check if the secret can log in, TruffleHog can send many requests to learn everything there is to know about the secret. Who created it? What resources can it access? What permissions does it have on those resources?",
    "fetchedAt": "2026-09-03T23:49:13.318Z"
  },
  {
    "id": "trufflehog-docs-14",
    "tier": "claimed-docs",
    "url": "https://trufflesecurity.com/docs/customizing-detection.md",
    "excerpt": "./trufflehog scan --config=config.yaml --include-detectors=AWS,GitHub",
    "fetchedAt": "2026-09-03T23:49:13.318Z"
  },
  {
    "id": "trufflehog-docs-15",
    "tier": "claimed-docs",
    "url": "https://trufflesecurity.com/trufflehog",
    "excerpt": "$ brew install trufflehog",
    "fetchedAt": "2026-09-03T23:49:13.318Z"
  },
  {
    "id": "trufflehog-docs-16",
    "tier": "claimed-docs",
    "url": "https://trufflesecurity.com/trufflehog",
    "excerpt": "Use pre-commit and pre-receive hooks so that developers can prevent leaked keys in the first place.",
    "fetchedAt": "2026-09-03T23:49:13.318Z"
  },
  {
    "id": "trufflehog-docs-17",
    "tier": "claimed-docs",
    "url": "https://trufflesecurity.com",
    "excerpt": "TruffleHog continuously tracks the status of all key types to identify whether remediation has occurred. Set up alerts across the platform of your choosing and include customized messages for developers to rotate and secure keys.",
    "fetchedAt": "2026-09-03T23:49:13.318Z"
  },
  {
    "id": "trufflehog-docs-18",
    "tier": "claimed-docs",
    "url": "https://trufflesecurity.com/docs",
    "excerpt": "TruffleHog can look for secrets in many places including git, chats, wikis, logs, api testing platforms, object stores, filesystems and more",
    "fetchedAt": "2026-09-03T23:50:36.221Z"
  },
  {
    "id": "trufflehog-gh-5",
    "tier": "github",
    "url": "https://github.com/trufflesecurity/trufflehog",
    "excerpt": "TruffleHog can send many requests to learn everything there is to know about the secret. Who created it? What resources can it access? What permissions does it have on those resources?",
    "fetchedAt": "2026-09-03T23:50:36.221Z"
  },
  {
    "id": "trufflehog-gh-6",
    "tier": "github",
    "url": "https://github.com/trufflesecurity/trufflehog",
    "excerpt": "docker run --rm -it -v \"$PWD:/pwd\" trufflesecurity/trufflehog:latest github --repo https://github.com/trufflesecurity/test_keys",
    "fetchedAt": "2026-09-03T23:50:36.221Z"
  },
  {
    "id": "trufflehog-gh-7",
    "tier": "github",
    "url": "https://github.com/trufflesecurity/trufflehog",
    "excerpt": "Checksums are applied to all artifacts, and the resulting checksum file is signed using cosign.",
    "fetchedAt": "2026-09-03T23:50:36.221Z"
  },
  {
    "id": "trufflehog-docs-19",
    "tier": "claimed-docs",
    "url": "https://trufflesecurity.com/docs/pre-commit-hooks.md",
    "excerpt": "This approach uses Git's `core.hooksPath` to apply hooks to all repositories without requiring any per-repository setup",
    "fetchedAt": "2026-09-03T23:50:36.221Z"
  },
  {
    "id": "trufflehog-docs-20",
    "tier": "claimed-docs",
    "url": "https://trufflesecurity.com/docs/pre-commit-hooks.md",
    "excerpt": "Husky is a popular tool for managing Git hooks in JavaScript/Node.js projects.",
    "fetchedAt": "2026-09-03T23:50:36.221Z"
  },
  {
    "id": "trufflehog-docs-21",
    "tier": "claimed-docs",
    "url": "https://trufflesecurity.com/docs/customizing-detection.md",
    "excerpt": "the `--verify-detectors` and `--no-verify-detectors` CLI flags can be used to configure detector-specific verification override settings",
    "fetchedAt": "2026-09-03T23:50:36.221Z"
  },
  {
    "id": "trufflehog-docs-22",
    "tier": "claimed-docs",
    "url": "https://trufflesecurity.com/docs/analyzers.md",
    "excerpt": "In open-source: Run `trufflehog analyze`",
    "fetchedAt": "2026-09-03T23:50:36.221Z"
  },
  {
    "id": "trufflehog-docs-23",
    "tier": "claimed-docs",
    "url": "https://trufflesecurity.com/docs/getting-started.md",
    "excerpt": "Deploy hosted or self-hosted scanners, scan your critical systems for secrets, and notify the right teams to remediate and rotate.",
    "fetchedAt": "2026-09-03T23:50:36.221Z"
  },
  {
    "id": "trufflehog-gh-8",
    "tier": "github",
    "url": "https://github.com/trufflesecurity/trufflehog",
    "excerpt": "Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint (and more) for credentials?",
    "fetchedAt": "2026-09-03T23:50:36.221Z"
  },
  {
    "id": "trufflehog-docs-24",
    "tier": "claimed-docs",
    "url": "https://trufflesecurity.com/docs",
    "excerpt": "single sign on saml 2 0 or oauth 2 0 ❌ ✅ role based access control ❌ ✅",
    "fetchedAt": "2026-09-03T23:50:36.221Z"
  },
  {
    "id": "trufflehog-docs-25",
    "tier": "claimed-docs",
    "url": "https://trufflesecurity.com/trufflehog",
    "excerpt": "TruffleHog™ is a secrets scanning tool that digs deep into your code repositories to find secrets, passwords, and sensitive keys.",
    "fetchedAt": "2026-09-03T23:52:27.731Z"
  },
  {
    "id": "trufflehog-docs-26",
    "tier": "claimed-docs",
    "url": "https://trufflesecurity.com/docs/pre-commit-hooks.md",
    "excerpt": "In rare cases, you may need to bypass pre-commit hooks: `git commit --no-verify -m \"Your commit message\"`",
    "fetchedAt": "2026-09-03T23:52:27.731Z"
  },
  {
    "id": "trufflehog-docs-27",
    "tier": "claimed-docs",
    "url": "https://trufflesecurity.com/docs/custom-detectors.md",
    "excerpt": "Verification is done via a webhook POST request to the provided `endpoint`.",
    "fetchedAt": "2026-09-03T23:52:27.731Z"
  },
  {
    "id": "trufflehog-docs-28",
    "tier": "claimed-docs",
    "url": "https://trufflesecurity.com/docs/getting-started.md",
    "excerpt": "Choose hosted (managed by Truffle Security) or self-hosted (running in your environment).",
    "fetchedAt": "2026-09-03T23:52:27.731Z"
  },
  {
    "id": "trufflehog-docs-29",
    "tier": "claimed-docs",
    "url": "https://trufflesecurity.com/docs",
    "excerpt": "TruffleHog classifies over 800 secret types, mapping them back to the specific identity they belong to.",
    "fetchedAt": "2026-09-03T23:52:27.731Z"
  },
  {
    "id": "trufflehog-docs-30",
    "tier": "claimed-docs",
    "url": "https://trufflesecurity.com/docs/pre-commit-hooks.md",
    "excerpt": "If you run your own git server, consider the pre-receive hook option which can block commits with secrets from being accepted.",
    "fetchedAt": "2026-09-03T23:52:27.731Z"
  },
  {
    "id": "trufflehog-docs-31",
    "tier": "claimed-docs",
    "url": "https://trufflesecurity.com/docs/pre-commit-hooks.md",
    "excerpt": "git commit --no-verify -m \"Your commit message\"",
    "fetchedAt": "2026-09-16T21:16:33.468Z"
  },
  {
    "id": "trufflehog-docs-32",
    "tier": "claimed-docs",
    "url": "https://trufflesecurity.com/docs/customizing-detection.md",
    "excerpt": "this trufflehog invocation will force verification for AWS and Buildkite secrets, irrespective of whether the configured sources have their `verify` flag set",
    "fetchedAt": "2026-09-16T21:23:00.085Z"
  },
  {
    "id": "trufflehog-docs-33",
    "tier": "claimed-docs",
    "url": "https://trufflesecurity.com",
    "excerpt": "TruffleHog continuously tracks the status of all key types to identify whether remediation has occurred. Set up alerts across the platform of your choosing",
    "fetchedAt": "2026-09-16T21:23:00.085Z"
  },
  {
    "id": "trufflehog-gh-9",
    "tier": "github",
    "url": "https://github.com/trufflesecurity/trufflehog",
    "excerpt": "continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint (and more) for credentials",
    "fetchedAt": "2026-09-16T21:25:15.807Z"
  },
  {
    "id": "trufflehog-comm-1",
    "tier": "community",
    "url": "https://news.ycombinator.com/item?id=30910893",
    "excerpt": "Note that v3 shifts to AGPL, from GPL in prior versions. Doesn't bother me personally, but I know a lot of companies won't touch AGPL'd projects with a bargepole so this probably worth bearing in mind.",
    "fetchedAt": "2026-09-03T23:55:09.718Z"
  },
  {
    "id": "trufflehog-comm-2",
    "tier": "community",
    "url": "https://news.ycombinator.com/item?id=30910893",
    "excerpt": "I don't understand the hype for v3. There are a number of other secret detection tools out there that leave this in the dust... From the commit history it looks like they superglued this thing together in ~3 months. Looking at the codebase, they also don't seem to know Golang very well.",
    "fetchedAt": "2026-09-03T23:55:09.718Z"
  },
  {
    "id": "trufflehog-comm-3",
    "tier": "community",
    "url": "https://news.ycombinator.com/item?id=30910893",
    "excerpt": "There are a lot of secret detection tools out there... I personally really like shhgit which is MIT licensed and is the tool I've found to most match my workflows.",
    "fetchedAt": "2026-09-03T23:55:09.718Z"
  },
  {
    "id": "trufflehog-comm-4",
    "tier": "community",
    "url": "https://news.ycombinator.com/item?id=41162730",
    "excerpt": "This seems like a very inflated article title. It can only find Deleted or Private commits on repos you have access to, which is a much different claim then the title initially read to me.",
    "fetchedAt": "2026-09-03T23:55:09.718Z"
  },
  {
    "id": "trufflehog-comm-5",
    "tier": "community",
    "url": "https://news.ycombinator.com/item?id=41162730",
    "excerpt": "You can likely do this without the GitHub API, with just the git protocol itself. Just ask for the commits and see what the server says.",
    "fetchedAt": "2026-09-03T23:55:09.718Z"
  },
  {
    "id": "trufflehog-comm-6",
    "tier": "community",
    "url": "https://news.ycombinator.com/item?id=47534578",
    "excerpt": "I couldn't find anything comparable to Trufflehog for Docker images, even though I have constantly read articles about 'secrets discovered in public images.' So I built my own (hopefully) comparable tool.",
    "fetchedAt": "2026-09-03T23:55:09.718Z"
  },
  {
    "id": "trufflehog-probe-1",
    "tier": "probe",
    "url": "https://trufflesecurity.com/llms.txt",
    "excerpt": "PROBE llms.txt: HTTP 404 at https://trufflesecurity.com/llms.txt",
    "fetchedAt": "2026-09-16T21:25:17.246Z"
  },
  {
    "id": "trufflehog-probe-2",
    "tier": "probe",
    "url": "https://trufflesecurity.com/docs.md",
    "excerpt": "PROBE docs-md: HTTP 200 at https://trufflesecurity.com/docs.md ---\ntitle: Choose your adventure\nslug: docs\ndescription: Compare TruffleHog Open Source and TruffleHog Enterprise. Both",
    "fetchedAt": "2026-09-16T21:25:17.246Z"
  },
  {
    "id": "trufflehog-probe-3",
    "tier": "probe",
    "url": "https://trufflesecurity.com/openapi.json",
    "excerpt": "PROBE openapi: all candidate paths 404 (https://trufflesecurity.com/openapi.json, https://trufflesecurity.com/swagger.json, https://trufflesecurity.com/api/openapi.json, https://trufflesecurity.com/.well-known/openapi.json)",
    "fetchedAt": "2026-09-16T21:25:17.246Z"
  },
  {
    "id": "trufflehog-probe-4",
    "tier": "probe",
    "url": "https://github.com/trufflesecurity/trufflehog",
    "excerpt": "official CLI documented at https://github.com/trufflesecurity/trufflehog",
    "fetchedAt": "2026-09-16T21:25:17.246Z"
  }
]