What is the difference between TruffleHog and Gitleaks?

TruffleHog uses entropy analysis and verified detection for higher accuracy, while Gitleaks uses regex patterns for faster scanning. TruffleHog also supports non-git sources like S3 buckets. Many teams use both for comprehensive coverage.

Does TruffleHog support GitHub Enterprise?

Yes. TruffleHog can scan GitHub, GitHub Enterprise, GitLab, Bitbucket, and Azure DevOps repositories.

Supported/Secrets

TruffleHog + servasec

Scan Git repositories for credentials and sensitive information with deep content analysis and entropy detection.

What is TruffleHog?

TruffleHog is an open source secret scanning tool by Truffle Security that finds exposed credentials in git repositories, S3 buckets, GCS buckets, filesystems, and more. Unlike basic regex scanners, TruffleHog uses entropy analysis and verified detection to reduce false positives. It supports 700+ secret detectors for known credential formats.

700+ built-in secret detectorsEntropy-based detectionVerified secret detectionGit, S3, GCS, filesystem scanningPastebin and other source scanning

Integrate TruffleHog with servasec

Install TruffleHog

Install TruffleHog via the official script or Docker.

brew install trufflehog

Scan your repository

Run TruffleHog against your git repo.

trufflehog git file://. --json > results.json

Push to servasec

Send the results to servasec.

curl -X POST "$SSC_PUBLIC_URL/api/ingest" \
  -H "X-Api-Token: $API_TOKEN" \
  -F "[email protected]"

What servasec adds to TruffleHog

Secret severity classification

Automatic severity assignment based on secret type and verification status.

Remediation workflow

Track secret rotation and remediation progress with assignments and due dates.

Cross-scanner context

See secrets alongside SAST and SCA findings for complete code risk assessment.

Try TruffleHog with servasec

Self-host servasec and connect TruffleHog in minutes. AGPLv3 licensed, full data ownership.