GitHub Release: trufflesecurity/trufflehog v3.97.5 (16.09.2026)

$ git clone https://github.com/trufflesecurity/trufflehog.git Clone

What's Changed

• Update module github.com/rabbitmq/amqp091-go to v1.13.0 [SECURITY] by


• Update github-actions by


• Update dependency golangci/golangci-lint to v2.13.2 by


• Make GitHub App installationId optional when scanning all installations by


• [INT-942] Add HumioAPIToken detector by


• Object filtering in S3 by


• feat(detectors): add Resend detector by


• Clean up use of wasilibs/go-re2 by


• Low-memory Git Scanning by


• Adding no-ignore flag to allow reporting of "ignored" secrets by


• Postgres: drop non-connection URI params before verifying by


• fix(detectors/ngrok): broaden valid bearer tokens matching by


• ci: avoid Node 20 BuildPulse action by


• Introduce a new optional detector interface that will allow us to verify credentials not in the cache by


• perf(engine): lowercase prefilter chunks as ASCII in a pooled buffer by


• Add documentation for CircleCI source by


• Add filesystem source documentation by


• Add elasticsearch source documentation by


• [SCAN-177] Purge secret parts from verification cache by

New Contributors

Full Changelog: v3.97.4...v3.97.5