---
id: "trufflehog"
category: "detector"
url: "http://registry.apicrafter.io/tool/trufflehog"
---

# TruffleHog (`trufflehog`)

TruffleHog is an open-source (AGPL-3.0) secret scanner from Truffle Security that searches git history, file systems, cloud storage and other sources for leaked credentials. Each of its several hundred detectors targets one service and combines keywords with a regular expression; many detectors then call the service's API to check whether the credential is live. The list of supported types covers only the registry datatypes that match a detector.

Website: <https://github.com/trufflesecurity/trufflehog>

## Supported datatypes (46)

- `anthropic_api_key`
- `aws_access_key_id`
- `aws_secret_access_key`
- `azure_storage_account_key`
- `cloudflare_origin_ca_key`
- `connection_string`
- `databricks_access_token`
- `digitalocean_token`
- `doppler_token`
- `github_fine_grained_pat`
- `github_token`
- `gitlab_pat`
- `google_api_key`
- `grafana_service_account_token`
- `hashicorp_vault_token`
- `heroku_oauth_token`
- `huggingface_access_token`
- `jfrog_api_key`
- `jfrog_reference_token`
- `jwt`
- `linear_api_key`
- `mailchimp_api_key`
- `npm_access_token`
- `openai_api_key`
- `planetscale_password`
- `planetscale_token`
- `postman_api_key`
- `pulumi_access_token`
- `pypi_token`
- `rubygems_api_key`
- `sendgrid_api_key`
- `sendinblue_api_key`
- `sentry_auth_token`
- `shared_access_signature`
- `shopify_access_token`
- `slack_token`
- `slack_webhook_url`
- `sonarqube_token`
- `square_access_token`
- `square_oauth_secret`
- `stripe_api_key`
- `telegram_bot_token`
- `terraform_cloud_api_token`
- `twilio_api_key_sid`
- `uri_with_password`
- `x509_private_key`