# trufflesecurity/trufflehog

> TruffleHog is a Go tool for finding leaked credentials: it scans Git, chats, wikis, logs and filesystems, classifies secrets across 800+ types, and verifies whether they are still live. It is aimed at security teams and developers auditing repos and infrastructure.

- Magnitude: 1.7 out of 10 — Steady
- Stars: 28,602 total · +7 stars measured 2026-10-20, 00:28–11:03 UTC, ≈ 15 by evening
- Star trust: star growth looks organic
- Category: Security · Language: Go · License: AGPL-3.0 · Created: 2016-12-31 · Last push: 2026-10-20
- GitHub: https://github.com/trufflesecurity/trufflehog · Homepage: https://trufflesecurity.com · Page: https://gitnova.dev/en/r/trufflesecurity/trufflehog

## Useful for

- Scan a GitHub repo for live secrets before making code public
- Scan an entire GitHub org while excluding archived repositories
- Run checks in CI to block commits containing leaked keys

## Why it’s here

- Star-counter measurements on 2026-10-20 (UTC), 00:28–11:03: 28595 → 28602 stars (+7). This is the change over that interval.
- Estimated end-of-day forecast: about +15 stars, using observed gains and the previous day.
- Interest is fading: the two-day pace is 59% of the previous week and a half.

## Star trust

Star growth looks organic.

Star-trust labels are heuristics based on the repository’s behavior, not a check of every stargazer.

## Numbers

- Forks: 2,652
- Issues and pull requests: 5,380
- Watchers: 216
- Average over the last week: 18 per day
- Usual pace: 25 per day
- Latest release: v3.99.3 (2026-10-19)

## Stars per day, last 30 days (oldest → newest, today is partial)

2026-09-30 … 2026-10-29: 13, 26, 16, 19, 18, 19, 16, 33, 36, 37, 15, 25, 34, 28, 24, 15, 16, 15, 25, 15, 4, None, None, None, None, None, None, None, None, None

## Magnitude by day, last 14 days

10-07 1.7, 10-08 2.3, 10-09 2.4, 10-10 2.4, 10-11 1.8, 10-12 2.2, 10-13 2.5, 10-14 2.2, 10-15 2.0, 10-16 1.7, 10-17 1.8, 10-18 1.7, 10-19 2.0, 10-20 1.7

---

Magnitude (0–10) measures how fast and how unusually interest in a repository is growing right now. It is not a quality score.
Days are UTC. “So far today” is a fact; “expected by the end of the day” is a forecast.
Summaries and use cases are written by an LLM (DeepSeek V4.1 Flash) from the README and may be inaccurate: verify specific claims (benchmarks, speed, hardware) in the repository itself.
Data as of 2026-10-20 11:08 UTC, updated every 30 minutes.