Truffle Security
trufflehog
Pipe trufflehog’s NDJSON into the trufflehog filter.
trufflehog git file://. --json | node "$SCAN_SCRIPTS/filter-trufflehog-output.mjs".
A finding trufflehog verified with the provider is always private, unless a whole-file exception dropped it first.
More integrations
All integrations →- 01
gitleaks
gitleaks scans with the generated config; the gitleaks filter classifies its JSON report.
- 02
GitHub Actions
A copy-paste job installs the package into a scratch directory, scans the full history, filters and fails on private findings.
- 03
GitHub Packages
@catesworks/secret-scanis a restricted package on GitHub Packages, not on the public npm registry.