WingNews logo WingNews
top | item 30910893

TruffleHog v3 – Detect and automatically verify over 600 credential types

84 points| riverdroid | 3 years ago |github.com

8 comments

order

lol768|3 years ago

Note that v3 shifts to AGPL, from GPL in prior versions.

Doesn't bother me personally, but I know a lot of companies won't touch AGPL'd projects with a bargepole so this probably worth bearing in mind.

grandiosecnsmr|3 years ago

I don't understand the hype for v3. There are a number of other secret detection tools out there that leave this in the dust. Plus, for all the money they took on (wasn't it more than $10M?) I'd expect a bigger delta between versions. From the commit history it looks like they superglued this thing together in ~3 months. Looking at the codebase, they also don't seem to know Golang very well.

atonse|3 years ago

Is there a tool like this with a more permissive license?

psanford|3 years ago

There are a lot of secret detection tools out there. It probably is going to depend a lot on the specific features you care about. I personally really like shhgit[0] which is MIT licensed and is the tool I've found to most match my workflows.

[0]: https://github.com/eth0izzle/shhgit