trufflesecurity/trufflehog

Find, verify, and analyze leaked credentials

28.5k stars · 2.6k forks · Go

Healthy

Healthy: actively maintained by 37 people, no known risks.

Why

No rule fired.

What would change this

Maintenance

Complete

Active

Human commits, 30 days
64
Human commits, 90 days
136
Human commits, 365 days
401
Bot share of commits, 365 days
8%
Last commit
Oct 14, 2026 (13 hours ago)
Last human commit
Oct 14, 2026 (13 hours ago)
Authors, 90 days
37
Last release
Oct 8, 2026 (6 days ago)
Median PR merge time
22 hours

Responsiveness: of 24 recent issues, 46% got a maintainer reply. Median first response: 47 hours.

Sources: Commits, Releases, Merged pull requests, Issues

People

Complete
Owner
Organization
Commits sampled
401 since Oct 14, 2025
Authors for half of commits
6
Authors for 80% of commits
17
Contributors
206

Top committers

The top committer changed during this period.

Sources: Commits, Contributors

Stars

Complete

Organic, confidence high

Stars per week, 2016-12-25 to 2026-10-11. 31 weeks overlap a burst.Peak 1.2k a week2016-12-252026-10-11
Bars show stars gained each week. Orange bars overlap a burst.

Bursts

Anyone can buy stars for any repo; bursts alone don't prove the owner did.

Sources: How star history is analyzed

Risk

Complete

Flags

No risk flags.

License

Now
AGPL-3.0 (OSI-approved)
A year ago
AGPL-3.0 (OSI-approved)

Packages

Package and advisory data: deps.dev and OSV.

OpenSSF Scorecard: 7.4 out of 10 (via deps.dev).

Sources: GitHub: trufflesecurity/trufflehog, deps.dev: Go github.com/trufflesecurity/trufflehog/v3

Badge

Add this to a README to show the current verdict:

[![RepoRadar](https://reporadar.ai/trufflesecurity/trufflehog/badge.svg)](https://reporadar.ai/trufflesecurity/trufflehog)

Earlier verdicts

Computed 10 hours ago · method 2026.10.2