Skip to content

Instantly share code, notes, and snippets.

@dinvlad
Last active August 10, 2022 15:52
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save dinvlad/892fa1e435f38fbcc58a936084e1d7ca to your computer and use it in GitHub Desktop.
Save dinvlad/892fa1e435f38fbcc58a936084e1d7ca to your computer and use it in GitHub Desktop.
Truffelhog not detecting AWS secrets, with or without -max-depth 1 option
$ trufflehog filesystem --directory . --trace
DEBU[0000] running version dev
DEBU[0000] running version dev
DEBU[0000] running with up to 32 workers
DEBU[0000] loaded 2 decoders
DEBU[0000] loaded 694 detectors total, 694 with verification enabled. 0 with verification disabled
πŸ·πŸ”‘πŸ· TruffleHog. Unearth your secrets. πŸ·πŸ”‘πŸ·
Found unverified result πŸ·πŸ”‘β“
Detector Type: AWS
Raw result: AKIAXLN5TJTY5DI3DQWO
File: README.md
DEBU[0001] scanned 28 chunks
###################################################################################################
$ trufflehog git file://. --trace
DEBU[0000] running version dev
DEBU[0000] running version dev
DEBU[0000] running with up to 32 workers
DEBU[0000] loaded 2 decoders
DEBU[0000] loaded 694 detectors total, 694 with verification enabled. 0 with verification disabled
DEBU[0000] Git repo local path: .
πŸ·πŸ”‘πŸ· TruffleHog. Unearth your secrets. πŸ·πŸ”‘πŸ·
{"level":"debug","time":"2022-08-10T11:52:02-04:00","message":"executing: /usr/bin/git -C . log -p -U0 --full-history --all -G."}
TRAC[0000] Scanning file from git commit=c3c247d10eef0bef6a28c981bd4da64529ed816a file=README.md
TRAC[0000] Scanning file from git commit=e96517f0a8f29ef88d9b9c21ecb0d1d37bc90756 file=README.md
TRAC[0000] Scanning file from git commit=5aefd3097297fdd8161e07888319aed4ac7973b8 file=README.md
TRAC[0000] Scanning file from git commit=f2b972d5586996fd95c11e06ef218b2b1d388e5d file=README.md
TRAC[0000] Scanning file from git commit=edd0b4ced41a4ccf80f88b282ef8a3a6628f2725 file=README.md
TRAC[0000] Scanning file from git commit=5dc61f027461f4dcc3c4955a5e0890d1c656b47b file=README.md
TRAC[0000] Scanning file from git commit=a18c592782070f624a3c07dd0904fb9a9ddb6641 file=README.md
TRAC[0000] Scanning file from git commit=93bbfa15c071ca65b1767a268ba6f37d4f98c9c3 file=README.md
TRAC[0000] Scanning file from git commit=cf312ce8c41ae7de51b1de694bc637a0d7d511b6 file=README.md
TRAC[0000] Scanning file from git commit=5e88325ecd0f2d3b5f1ed8580a119a4f071be872 file=README.md
TRAC[0000] Scanning file from git commit=7ad1a48f70a432ff4672ea43189b43534b0c5926 file=README.md
TRAC[0000] Scanning file from git commit=c3905e1c4ce3dfe27c7d31aa1a2789c4d4e49d6e file=README.md
TRAC[0000] Scanning file from git commit=bf3df7b87fadd75b108b807e3b6d404f38c0e26e file=README.md
TRAC[0000] Scanning file from git commit=75e01782dac54ff9719792080951c71570ea668c file=README.md
TRAC[0000] Scanning file from git commit=d0699d5389c2d33eb8d3604b3eb1ede9dc433dc1 file=README.md
TRAC[0000] Scanning file from git commit=b95c2833027609685a9885e8518311a280d5071e file=README.md
TRAC[0000] Scanning file from git commit=74ad214666f187c25be3a6edd4cfd71f77d10aab file=README.md
DEBU[0000] Scanning complete. Scan time: 0.052643
DEBU[0001] scanned 20 chunks
$ trufflehog git https://github.com/dinvlad/test-secrets-detection.git --trace --no-verification
DEBU[0000] running version dev
DEBU[0000] running version dev
DEBU[0000] running with up to 32 workers
DEBU[0000] loaded 2 decoders
DEBU[0000] loaded 694 detectors total, 0 with verification enabled. 694 with verification disabled
DEBU[0000] Cloning remote Git repo without authentication
DEBU[0000] Git repo local path: /tmp/trufflehog2335629075
πŸ·πŸ”‘πŸ· TruffleHog. Unearth your secrets. πŸ·πŸ”‘πŸ·
{"level":"debug","time":"2022-08-09T17:11:28-04:00","message":"executing: /usr/bin/git -C /tmp/trufflehog2335629075 log -p -U0 --full-history --all -G."}
TRAC[0000] Scanning file from git commit=cf312ce8c41ae7de51b1de694bc637a0d7d511b6 file=README.md
TRAC[0000] Scanning file from git commit=5e88325ecd0f2d3b5f1ed8580a119a4f071be872 file=README.md
TRAC[0000] Scanning file from git commit=7ad1a48f70a432ff4672ea43189b43534b0c5926 file=README.md
TRAC[0000] Scanning file from git commit=c3905e1c4ce3dfe27c7d31aa1a2789c4d4e49d6e file=README.md
TRAC[0000] Scanning file from git commit=bf3df7b87fadd75b108b807e3b6d404f38c0e26e file=README.md
TRAC[0000] Scanning file from git commit=75e01782dac54ff9719792080951c71570ea668c file=README.md
TRAC[0000] Scanning file from git commit=d0699d5389c2d33eb8d3604b3eb1ede9dc433dc1 file=README.md
TRAC[0000] Scanning file from git commit=b95c2833027609685a9885e8518311a280d5071e file=README.md
TRAC[0000] Scanning file from git commit=74ad214666f187c25be3a6edd4cfd71f77d10aab file=README.md
DEBU[0000] Scanning complete. Scan time: 0.053079
DEBU[0001] scanned 11 chunks
###############################################################################################################################################
$ trufflehog git https://github.com/dinvlad/test-secrets-detection.git --trace --no-verification --max-depth 1
DEBU[0000] running version dev
DEBU[0000] running version dev
DEBU[0000] running with up to 32 workers
DEBU[0000] loaded 2 decoders
DEBU[0000] loaded 694 detectors total, 0 with verification enabled. 694 with verification disabled
DEBU[0000] Cloning remote Git repo without authentication
DEBU[0000] Git repo local path: /tmp/trufflehog797659712
πŸ·πŸ”‘πŸ· TruffleHog. Unearth your secrets. πŸ·πŸ”‘πŸ·
{"level":"debug","time":"2022-08-09T17:12:14-04:00","message":"executing: /usr/bin/git -C /tmp/trufflehog797659712 log -p -U0 --full-history --all -G."}
TRAC[0000] Scanning file from git commit=cf312ce8c41ae7de51b1de694bc637a0d7d511b6 file=README.md
TRAC[0000] Scanning file from git commit=5e88325ecd0f2d3b5f1ed8580a119a4f071be872 file=README.md
DEBU[0000] reached max depth
DEBU[0000] Scanning complete. Scan time: 0.052292
DEBU[0001] scanned 2 chunks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment