TruffleHog

Configure TruffleHog to scan public and private GitHub repositories.

TruffleHog detects an AWS API key committed to a repository.

TruffleHog verifies the key with AWS to ensure it is active.

An alert is sent to the security team with details about the leaked key and affected repository.

The security team revokes the leaked key and notifies the developer to rotate it.

TruffleHog confirms the key is revoked and marks the incident as resolved.

Configure TruffleHog to scan S3 buckets for sensitive files.

TruffleHog detects a file containing an API key in an S3 bucket.

TruffleHog verifies the key with the relevant provider.

An alert is sent to the security team with details about the exposed key and S3 bucket.

The security team restricts access to the S3 bucket and revokes the leaked key.

TruffleHog confirms the key is revoked and access is restricted.

Configure TruffleHog to scan Slack channels for sensitive information.

TruffleHog detects an API key shared in a Slack channel.

TruffleHog verifies the key with the relevant provider.

An alert is sent to the security team with details about the leaked key and Slack channel.

The security team revokes the leaked key and informs the user who shared it.

TruffleHog confirms the key is revoked and the incident is resolved.

Configure TruffleHog to scan repositories for JWTs.

TruffleHog detects a JWT with a public-key signature.

TruffleHog verifies the JWT for liveness.

An alert is sent to the security team with details about the JWT.

The security team revokes the JWT.

TruffleHog confirms the JWT is revoked and the incident is resolved.

Integrate TruffleHog with the CI/CD pipeline.

TruffleHog scans the code for secrets during the build process.

If a secret is detected, TruffleHog triggers an automated secret rotation process.

The pipeline is halted until the secret is rotated.

The build process continues with the new secret.

The security team receives an alert about the rotated secret.