trufflehog

Cloud Security

Cloud Credential Harvesting and Secret Sprawl

Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Containers & DevSecOps

Docker Image Security: Layers, Secrets, and Scanning

Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Containers & DevSecOps

Preventing and Remediating Secrets in Source Control

Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Containers & DevSecOps

Secrets Management and Hunting Leaked Secrets in Git

Hunt leaked credentials in git history with gitleaks and trufflehog, then lock them down with HashiCorp Vault.