Skip to main content
TruffleHog is a secret scanner with verification capabilities that can detect and verify secrets in code. CodeRabbit runs TruffleHog in filesystem mode with a repository-supplied config file.

ā€‹
Configuration

TruffleHog requires a config file in the repository. CodeRabbit allows the following to be used:
  • trufflehog-config.yml
  • trufflehog-config.yaml
  • trufflehog.yml
  • trufflehog.yaml
  • .trufflehog.yml
  • .trufflehog.yaml
If none of these are found, TruffleHog is skipped for the run.