Hacker GitHub

← All repos

godaddy/tartufo

View on GitHub ↗ ★ 518 Python archived

Searches through git repositories for high entropy strings and secrets, digging deep into commit history

7 mentions on Hacker News by 6 people: 4 stories, 3 comments · first 2021-07-16 · latest 2024-10-31

Mentions per year 7 mentions · busiest year 2024 (3)
20082026
AllStoriesComments NewestTopOldest
  1. GoDaddy open sourced something similar https://github.com/godaddy/tartufo
    comment by trulyhnh · 2024-06-04 · in Entropy, a CLI that scans files to find high entropy lines (might be secrets)
  2. …https://docs.github.com/en/developers/overview/secret-scanni... https://github.com/godaddy/tartufo https://github.com/GitGuardian/ggshield https://github.com/awslabs/git-secrets https://github.com/sirwart/secrets https://t
    comment by pabs3 · 2022-11-21 · in GitHub access token exposure
  3. You could set up something like https://github.com/godaddy/tartufo in a pre-commit hook. Not sure if github has a way to hook into the push hooks on server side, they might though.
    comment by kadoban · 2022-10-13 · in Toyota suffered a data breach by accidentally exposing a secret key on GitHub