Issues

• Secrets in .pyc files are missed — most skipped entirely, no log line

  bug
  trufflesecurity/trufflehog#5430 · Filter by author abhinavsecond opened on Oct 14, 2026
  1

• git: add --exclude-commits-file to skip already-scanned commit OIDs

  enhancement
  trufflesecurity/trufflehog#5429 · Filter by author miteshjoshi opened on Oct 14, 2026

• SSRF guard blocks operator-configured --verifier endpoints (e.g. JiraDataCenterPAT on CGNAT/private networks)

  trufflesecurity/trufflehog#5418 · Filter by author jkugler opened on Oct 12, 2026

• CircleCI detector lacks end-point customization

  enhancement
  trufflesecurity/trufflehog#5416 · Filter by author jkugler opened on Oct 12, 2026

• Bug: Corrupted ZIP member prevents scanning subsequent files and exits successfully

  bug
  trufflesecurity/trufflehog#5403 · Filter by author arunimshukla opened on Oct 8, 2026

• Docker action: Git clone fails when temporary destination is inside macOS bind mount

  trufflesecurity/trufflehog#5400 · Filter by author dpearson2699 opened on Oct 8, 2026

• Publish a signed packslip with each release

  trufflesecurity/trufflehog#5393 · Filter by author superbiche opened on Oct 5, 2026

• Local file:// clone fails when refs map to the same destination

  bug
  trufflesecurity/trufflehog#5390 · Filter by author jzqiu-arista opened on Oct 5, 2026

• On Windows, Trufflehog's git scan crashes silently partway through, truncating the list of found secrets

  bug
  trufflesecurity/trufflehog#5379 · Filter by author andrewducker opened on Oct 1, 2026

• Detector request: Supabase secret API keys (sb_secret_)

  trufflesecurity/trufflehog#5362 · Filter by author BryceEWatson opened on Sep 28, 2026

• Add a Cloud Storage HMAC key detector

  trufflesecurity/trufflehog#5339 · Filter by author DrFaust92 opened on Sep 21, 2026

• Add a ClickHouse detector

  trufflesecurity/trufflehog#5337 · Filter by author DrFaust92 opened on Sep 21, 2026

• [Bug] GitHub Analyzer panics when encountering unrecognized permission scopes

  trufflesecurity/trufflehog#5335 · Filter by author Gracy769 opened on Sep 21, 2026

• CloudflareApiToken detector misses 40-char tokens ending in '-' (trailing \b)

  trufflesecurity/trufflehog#5328 · Filter by author sumlac opened on Sep 18, 2026
  1

• Add Composio API key detector

  trufflesecurity/trufflehog#5321 · Filter by author groovyBugify opened on Sep 16, 2026
  2

  

• Add a detector for Kong Konnect Platform tokens.

  enhancement
  trufflesecurity/trufflehog#5306 · Filter by author mrwanny opened on Sep 10, 2026

• False detection of Tunnel dummy keys

  bug
  trufflesecurity/trufflehog#5299 · Filter by author TacII opened on Sep 10, 2026
  1

• MondoDB Detector silently discards valid secrets

  trufflesecurity/trufflehog#5276 · Filter by author steeve85 opened on Sep 4, 2026
  1

• HTTPX (Project Discovery) Response Body Scanning

  enhancement
  trufflesecurity/trufflehog#5262 · Filter by author karllll opened on Sep 1, 2026
  1

• gitparse: malformed binary diff line can panic pathFromBinaryLine

  trufflesecurity/trufflehog#5232 · Filter by author posquit0 opened on Aug 25, 2026
  2

• GitHub Actions artifacts not part of the GitHub scanner

  enhancement
  trufflesecurity/trufflehog#5205 · Filter by author karimelmel opened on Aug 12, 2026

• GitHub Action: unhandled event types silently fall through to a full-history scan (BASE/HEAD left empty)

  trufflesecurity/trufflehog#5190 · Filter by author MoazMansour opened on Aug 8, 2026

• Windows local Git scan duplicates the drive letter for file:///X:/ URIs

  trufflesecurity/trufflehog#5161 · Filter by author paulcam206 opened on Jul 28, 2026

• Support scanning OpenSearch clusters via the Elasticsearch source

  bug
  trufflesecurity/trufflehog#5124 · Filter by author anon767 opened on Jul 12, 2026
  1

• Add Resend detector

  enhancement
  trufflesecurity/trufflehog#5107 · Filter by author mwoss opened on Jul 2, 2026