dep-updates
Skill29k starsChanged 7 months agoAGPL-3.0View on GitHub
Plan and apply Go dependency updates, including advisory-driven bumps, Trivy/govulncheck validation, and supply-chain review. Use when the user asks to update dependencies, refresh modules for security alerts, or run dependency vulnerability scans.
- Installs packages
Adopted by
Steady: 0 new projects took it in the last 4 weeks, none the 4 weeks before.thin data
Who's talking about trufflesecurity/trufflehog
- NahamSec“Critical Bounties via Leaked API Keys (FT TruffleHug)”YouTube · Apr 5, 2022 · 23k views
- Kishore Newton“Git Never Forgets Your Secrets 🔑 #shorts #coding #security”YouTube · Feb 24, 2026 · 7.7k views
- Tom Delalande“Truffle Hog - Everything You Need To Know #coding #programming #security”YouTube · Sep 18, 2025 · 5.9k views
- Hacking Simplified“Finding and Verifying secrets with trufflehogV3 & Interview with the founder, Dylan”YouTube · Apr 12, 2022 · 4.6k views
- Simba Tech Tv“GITHUB RECON TOOL | TRUFFLEHOG | FINDING SECRETS AND API KEYS”YouTube · Jun 8, 2021 · 1.6k views
The biggest 5 of 97 mentions linking to the repository that our crawl found. Each line is their own headline.
See all 97
Talked about on GitHub, YouTube, Bluesky, the web, Hacker News and Stack Overflow (97 times).
On GitHub · 50
- Oct 14, 2024proposal: x/tools/go/analysis/passes/appends: check for incorrect slice length initialization — golang/go18 reactions · 28 comments
- Feb 19, 2026Bug: Stylelint plugin not working — qltysh/qlty4 reactions · 2 comments
- Jul 10, 2026chore(deps): bump trufflesecurity/trufflehog from 3.95.6 to 3.96.0 — KooshaPari/PhenoShared3 reactions · 4 comments
- Jun 18, 2026chore(deps): bump trufflesecurity/trufflehog from 3fc0c2aa6648d54242e4af6fbfde0701796e4fb0 to 30d5bb91af1a771378349dbbb0c82129392acf70 — KooshaPari/PhenoShared3 reactions · 4 comments
- Jun 11, 2026ci(deps)(deps): bump the actions group across 1 directory with 18 updates — KooshaPari/AgilePlus3 reactions · 5 comments
45 more on GitHub
- May 11, 2026chore(deps): update pre-commit hook trufflesecurity/trufflehog to v3.99.9 — MH0386/.dotfiles3 reactions · 3 comments
- Apr 6, 2026chore(ci): bump trufflesecurity/trufflehog from 3.93.7 to 3.94.2 — ProTechPh/FreelanceXchain-api3 reactions · 4 comments
- Sep 28, 2026chore(deps): bump trufflesecurity/trufflehog from 3.97.8 to 3.97.9 — abhimehro/personal-config2 reactions · 11 comments
- Aug 14, 2026Bump trufflesecurity/trufflehog from 3.90.0 to 3.96.0 — AI-Code-Review-Evals/entelligence-grafana2 reactions · 4 comments
- Aug 6, 2026Exclude false positive lob detector — getsentry/.github2 reactions
- Jul 27, 2026chore(ci): bump trufflesecurity/trufflehog from 3.95.9 to 3.96.0 — ProTechPh/FreelanceXchain-api2 reactions · 5 comments
- Jul 13, 2026chore(ci): bump trufflesecurity/trufflehog from 3.95.8 to 3.95.9 — ProTechPh/FreelanceXchain-api2 reactions · 4 comments
- Jul 6, 2026chore(ci): bump trufflesecurity/trufflehog from 3.95.6 to 3.95.8 — ProTechPh/FreelanceXchain-api2 reactions · 4 comments
- Jul 3, 2026chore(deps): bump trufflesecurity/trufflehog from 3.95.6 to 3.95.8 — KooshaPari/PhenoShared2 reactions · 6 comments
- Jun 22, 2026chore(ci): bump trufflesecurity/trufflehog from 3.93.7 to 3.95.6 — ProTechPh/FreelanceXchain-api2 reactions · 4 comments
- Jun 19, 2026ci: update maintenance tooling — openclaw/notcrawl2 reactions · 2 comments
- Jun 9, 2026chore(deps): bump trufflesecurity/trufflehog from 3fc0c2aa6648d54242e4af6fbfde0701796e4fb0 to 6cefc1efcc0c22a09d68e051b288862c975ff1a2 — KooshaPari/PhenoShared2 reactions · 7 comments
- Jun 8, 2026chore(ci): bump trufflesecurity/trufflehog from 3.93.7 to 3.95.5 — ProTechPh/FreelanceXchain-api2 reactions · 4 comments
- May 18, 2026chore(ci): bump trufflesecurity/trufflehog from 3.93.7 to 3.95.3 — ProTechPh/FreelanceXchain-api2 reactions · 4 comments
- May 8, 2026chore(deps): bump trufflesecurity/trufflehog from 3fc0c2aa6648d54242e4af6fbfde0701796e4fb0 to ba0a524d6e51744d9d4e306bc57ac5d6ca5173ea — KooshaPari/PhenoShared2 reactions · 7 comments
- May 3, 2026chore(deps): bump trufflesecurity/trufflehog from 3fc0c2aa6648d54242e4af6fbfde0701796e4fb0 to 5f47aad1c2df34f7c6230784ce9a5a659922f479 — KooshaPari/AgilePlus2 reactions · 3 comments
- May 2, 2026chore(deps): bump trufflesecurity/trufflehog from 3fc0c2aa6648d54242e4af6fbfde0701796e4fb0 to 5f47aad1c2df34f7c6230784ce9a5a659922f479 — KooshaPari/PhenoShared2 reactions · 8 comments
- Apr 27, 2026chore(ci): bump trufflesecurity/trufflehog from 3.93.7 to 3.95.2 — ProTechPh/FreelanceXchain-api2 reactions · 3 comments
- Mar 7, 2026Bump trufflesecurity/trufflehog from 3.88.29 to 3.93.7 — code-review-benchmark/grafana__grafana__entelligence__PR107534__202603062 reactions · 1 comment
- Jan 16, 2025few projects that can be added — avelino/awesome-go2 reactions · 26 comments
- Aug 4, 2023[Sensitive keys in codebases]It may be referencing an old version of TruffleHog(V2)? — madhuakula/kubernetes-goat2 reactions · 4 comments
- May 30, 2023staticcheck: filepath.Ext returns an empty string or a string beginning with a dot — dominikh/go-tools2 reactions · 2 comments
- Jul 17, 2020[Check] Secret scanning — semgrep/semgrep-rules2 reactions · 3 comments
- Jul 29, 2026Feature: Native secret redaction to prevent credential leakage to LLM — anomalyco/opencode1 reaction · 2 comments
- Mar 7, 2026[Suggestion] Improve External Egress Risk logic — nocomplexity/codeaudit1 reaction · 2 comments
- Jan 1, 2026Add TruffleHog credential scanning to CI/CD pipeline — kmesiab/concept-model-protein-classifier1 reaction
- Aug 22, 2025[BUG] The sast security scan always fails on main because it can't compare the BASE to the HEAD — ntindle/gridfinity-space-optimizer1 reaction
- Jul 13, 2025trufflehog: error occurred with trufflehog updater — cachix/git-hooks.nix1 reaction
- Apr 8, 2025Add a code vulnerability checker — cyberark/oss-template1 reaction · 1 comment
- Dec 10, 2024Remove verification overlap — rgmz/trufflehog1 reaction
- May 2, 2024Expand the set of recognizable patterns — dotutils/MSBuild.BinlogRedactor1 reaction
- Mar 14, 2023Potentially make erddap public proof — cioos-siooc/cioos-pacific-erddap1 reaction
- Oct 13, 2022Publish the Vroom repo — getsentry/open-source-pledge1 reaction · 10 comments
- Sep 22, 2022Have a github action to compare git-secrets and trufflehog without any configuration update — OWASP/wrongsecrets1 reaction · 3 comments
- Nov 13, 2026[Tool]: Trufflehog CI/CD — Pyth3rEx/AnNIXion0 reactions
- Nov 6, 2026Project Proposal: Experimental comparison of secret scanning tools: Gitleaks vs. TruffleHog - Danilo Parisi (mat. 665364) , Mattia Correnti (mat. 665367) — lucaderi/Cybersecurity0 reactions · 1 comment
- Oct 16, 2026Add TruffleHog secret scanning: PR workflow + pre-commit templates, synced to all repos — blairg23/repo-scaffold0 reactions
- Aug 14, 2026[REC] trufflehog | gitleaks alternative — x-cmd/install0 reactions
- May 13, 2026ci(deps): bump trufflesecurity/trufflehog from 3.95.2 to 3.95.3 — chaterm/Chaterm0 reactions · 1 comment
- May 4, 2026Expand hardcoded secret detection using open-source references — PostHog/warlock0 reactions
- Mar 22, 2026SECURITY: Hardcoded AWS Credentials Exposed in Code — Maide-karamanoglu/mcp-student-sandbox0 reactions
- Jul 3, 2025Mention that `trufflehog` is a depdency — trufflesecurity/force-push-scanner0 reactions · 5 comments
- Mar 11, 202595a2a2a04c228b35687b77ccf5b191f8c5ae211c — Hamidsalri/literate-octo-giggle10 reactions
- Feb 5, 2025Detector Fix: Postgres — rgmz/trufflehog0 reactions
- Oct 22, 2024Package request: TruffleHog — void-linux/void-packages0 reactions
On YouTube · 22
- Apr 5, 2022Critical Bounties via Leaked API Keys (FT TruffleHug) — NahamSec23k views · 44 comments
- Feb 24, 2026Git Never Forgets Your Secrets 🔑 #shorts #coding #security — Kishore Newton7.7k views · 4 comments
- Sep 18, 2025Truffle Hog - Everything You Need To Know #coding #programming #security — Tom Delalande5.9k views · 3 comments
- Apr 12, 2022Finding and Verifying secrets with trufflehogV3 & Interview with the founder, Dylan — Hacking Simplified4.6k views · 7 comments
- Jun 8, 2021GITHUB RECON TOOL | TRUFFLEHOG | FINDING SECRETS AND API KEYS — Simba Tech Tv1.6k views
17 more on YouTube
- Apr 17, 2022[TruffleHog] Upgrading your Bug Bounty Recon! — at0m1.2k views · 1 comment
- Oct 13, 2023Find secrets with TruffleHog — DevSec Hacker1.2k views
- Jun 16, 2026Learn Trufflehog in Under 10 Min — Journey Cybersecurity1k views · 2 comments
- Oct 10, 2026TruffleHog: Securing Your Code Against Credential Leaks — Dann Paker AI968 views
- Jun 25, 2023Hack Applications Using Trufflehog and Whispers to Find Secrets — Ryan Armstrong863 views
- Oct 13, 2025GitHub’s Dark Side | 5 red Flags of Fake Repository — NYXTERA687 views · 4 comments
- Mar 15, 2024Find Secrets From GitHub Repo | Advance usage of Trufflehog #bugbounty #trufflehog #bugbountytips — HackTube5660 views · 4 comments
- Aug 9, 2021Why did these API keys LEAK? — Truffle Security653 views · 1 comment
- Nov 16, 2025လျှို့ဝှက်ရမယ့်အရာတွေ git ထဲမှာ ပေါက်နေလား။ #infosec #TruffleHog #github — Burmese Stack276 views · 2 comments
- Apr 4, 2026Trufflesecurity trufflehog hits over 250k stars #Shorts — Nightly Bits228 views
- Jun 2, 2026Red Team Recon — Hacker Playbook 3 | Chapter 2 (Full Tutorial) — Cyber Retro222 views · 14 comments
- Oct 1, 2026TruffleHog GitHub Overview: Active Verification and Local Secret Scanning — Alex Hitt80 views
- Jul 14, 2026Are Your API Keys Exposed? How to Find and Verify Leaked Credentials — Guess That Code53 views
- Sep 26, 2026API Keys Leaked? The Complete Detection & Recovery Manual (2026) — ErrorFixer45 views
- Nov 18, 2025Instalacion trufflehog - Find leaked credentials — Christian Vega44 views
- Jan 14, 2022trufflesecurity/truffleHog - Gource visualisation — Gourcer22 views
- Nov 1, 2024trufflesecurity/trufflehog - Gource visualisation — Gourcer16 views
On Bluesky · 19
- Feb 19, 2025Trufflehog est un outil d'analyse permettant de monitorer et découvrir les secrets et autres credentials qui pourraient fuiter par… — @ponceto91.bsky.social18 likes and reposts
- Aug 2, 2024TruffleHog : un outil Open Source pour détecter et vérifier les secrets exposés dans les dépôts Git, les répertoires de fichiers, etc. Il… — @bearstech.com10 likes and reposts
- Sep 17, 2025🔗 Liens utiles TruffleHog : 👉 Le projet : github.com/trufflese... 👉 En savoir plus : trufflesecurity.com/ — @bearstech.com8 likes and reposts
- Sep 17, 2025Trufflehog: Find, verify, and analyze leaked credentials GitHub: github.com/trufflesecur... ShinyHunters stated they used this tool in the… — @darkwebinformer.com4 likes and reposts
- Dec 11, 2025References: [1] unit42.paloaltonetworks.com/npm-supply-c... [2] github.com/trufflesecur... [3] github.com/trufflesecur... [4]… — @malmoeb.bsky.social2 likes and reposts
14 more on Bluesky
- Nov 4, 2024TruffleHog : un outil Open Source conçu pour détecter, vérifier et analyser les informations d'identification divulguées dans les dépôts… — @bearstech.com2 likes and reposts
- Oct 31, 2024📦 trufflesecurity / trufflehog ⭐ 16,075 (+18) 🗒 Go Find, verify, and analyze leaked credentials — @github-trending.bsky.social2 likes and reposts
- Mar 21, 2024One of the main features of Dropbear's scanner is secrets scanning: finding committed API secrets and passwords. 🕵️ To do this, I use two… — @valorin.social2 likes and reposts
- Sep 17, 2026trufflehog by @trufflesec (⭐️ 27963) Find, verify, and analyze leaked credentials #go — @golangoss.bsky.social1 likes and repost · 1 reply
- Sep 16, 2026trufflehog by @trufflesec (⭐️ 27955) Find, verify, and analyze leaked credentials #go — @golangoss.bsky.social1 likes and repost · 1 reply
- Sep 13, 2026trufflehog by @trufflesec (⭐️ 27863) Find, verify, and analyze leaked credentials #go — @golangoss.bsky.social1 likes and repost
- Sep 6, 2026trufflehog by @trufflesec (⭐️ 27697) Find, verify, and analyze leaked credentials #go — @golangoss.bsky.social1 likes and repost
- Oct 23, 2025Found a nice tool called TruffleHog that can search for secrets that might be accidentally leaked in files, logs, etc.… — @edelveis.dev1 likes and repost
- May 6, 2025For the uninitiated: github.com/trufflesecur... — @kvarnix.bsky.social1 likes and repost
- Jan 8, 2025Here are the links: https://github.com/gitleaks/gitleaks https://github.com/trufflesecurity/trufflehog — @valorin.social1 likes and repost
- Oct 20, 2023📦 trufflesecurity / trufflehog ⭐ 12,311 (+26) 🗒 Go Find and verify credentials — @github-trending.bsky.social1 likes and repost
- Sep 17, 2025För den som vill ha att göra: trufflehog github --org=din_organisation --results=verified,unknown github.com/trufflesecur... — @jonelf.bsky.social0 likes and reposts · 1 reply
- May 20, 2025参考資料・ベストプラクティス GitHub Secret Scanning: docs.github.com/en/code-secu... truffleHog(秘密鍵リーク検出): github.com/trufflesecur... dotenv vault:… — @nihonmatsu.bsky.social0 likes and reposts · 1 reply
- Jan 26, 20256. TruffleHog ⥛ Delve deep into Git repositories to uncover secrets, API keys & sensitive data before attackers do. 📌 GitHub:… — @mawg0ud.bsky.social0 likes and reposts · 1 reply
On the web · 3
- Oct 8, 2026trufflesecurity/trufflehog v3.99.1 on GitHub — newreleases.io
- Oct 7, 2026TruffleHog JSON Parser for Grafana Bench — pkg.go.dev
- Apr 20, 2022Find leaked credentials with TruffleHog — bartoszgorka.com
On Hacker News · 2
- Apr 4, 2022TruffleHog v3 – Detect and automatically verify over 600 credential types84 points · 8 comments
- Apr 2, 2025TruffleHog: Find, verify, and analyze leaked credentials1 point
On Stack Overflow · 1
- Aug 22, 2023How do I set a Powershell script to run a command and then run it again with a different filepath0 votes · 1 answer
The file
Show its rules and text
We split this skill into the rules it gives an agent
21 rules. About 0 are common, 9 are distinctive, and 12 are very specific to this project.
≈0
Common · estimate
Many files like this have a rule of this kind.
≈9
Distinctive · estimate
This author's own choices. Worth a look.
12
Very specific
Tied to their project's names, files or tools. Probably skip.
Licensed with conditions — read it at the source. We count its rules but don't quote them. Read them on GitHub.
≈ “Common” is an estimate: at least 1 in 5 of the 350,495 skill files we read have a rule of the same kind, not the same words. “Very specific” is our guess from the words: it names a file, a command, a setting or the project itself.
Does it work?
Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.
No reviews yet
People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.
- It worked
- Partly
- It didn't
Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.
Your trail
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
Now do this for your own.
Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.

