Issues

• Bug: Corrupted ZIP member prevents scanning subsequent files and exits successfully

  bug
  trufflesecurity/trufflehog#5403 · Filter by author arunimshukla opened on Oct 8, 2026

• Docker action: Git clone fails when temporary destination is inside macOS bind mount

  trufflesecurity/trufflehog#5400 · Filter by author dpearson2699 opened on Oct 8, 2026

• Publish a signed packslip with each release

  trufflesecurity/trufflehog#5393 · Filter by author superbiche opened on Oct 5, 2026

• Local file:// clone fails when refs map to the same destination

  bug
  trufflesecurity/trufflehog#5390 · Filter by author jzqiu-arista opened on Oct 5, 2026

• On Windows, Trufflehog's git scan crashes silently partway through, truncating the list of found secrets

  bug
  trufflesecurity/trufflehog#5379 · Filter by author andrewducker opened on Oct 1, 2026

• Detector request: Supabase secret API keys (sb_secret_)

  trufflesecurity/trufflehog#5362 · Filter by author BryceEWatson opened on Sep 28, 2026

• Add a Cloud Storage HMAC key detector

  trufflesecurity/trufflehog#5339 · Filter by author DrFaust92 opened on Sep 21, 2026

• Add a ClickHouse detector

  trufflesecurity/trufflehog#5337 · Filter by author DrFaust92 opened on Sep 21, 2026

• [Bug] GitHub Analyzer panics when encountering unrecognized permission scopes

  trufflesecurity/trufflehog#5335 · Filter by author Gracy769 opened on Sep 21, 2026

• CloudflareApiToken detector misses 40-char tokens ending in '-' (trailing \b)

  trufflesecurity/trufflehog#5328 · Filter by author sumlac opened on Sep 18, 2026
  1

• Add Composio API key detector

  trufflesecurity/trufflehog#5321 · Filter by author groovyBugify opened on Sep 16, 2026
  2

  

• Add a detector for Kong Konnect Platform tokens.

  enhancement
  trufflesecurity/trufflehog#5306 · Filter by author mrwanny opened on Sep 10, 2026

• False detection of Tunnel dummy keys

  bug
  trufflesecurity/trufflehog#5299 · Filter by author TacII opened on Sep 10, 2026
  1

• MondoDB Detector silently discards valid secrets

  trufflesecurity/trufflehog#5276 · Filter by author steeve85 opened on Sep 4, 2026
  1

• HTTPX (Project Discovery) Response Body Scanning

  enhancement
  trufflesecurity/trufflehog#5262 · Filter by author karllll opened on Sep 1, 2026
  1

• gitparse: malformed binary diff line can panic pathFromBinaryLine

  trufflesecurity/trufflehog#5232 · Filter by author posquit0 opened on Aug 25, 2026
  2

• GitHub Actions artifacts not part of the GitHub scanner

  enhancement
  trufflesecurity/trufflehog#5205 · Filter by author karimelmel opened on Aug 12, 2026

• GitHub Action: unhandled event types silently fall through to a full-history scan (BASE/HEAD left empty)

  trufflesecurity/trufflehog#5190 · Filter by author MoazMansour opened on Aug 8, 2026

• Windows local Git scan duplicates the drive letter for file:///X:/ URIs

  trufflesecurity/trufflehog#5161 · Filter by author paulcam206 opened on Jul 28, 2026

• Support scanning OpenSearch clusters via the Elasticsearch source

  bug
  trufflesecurity/trufflehog#5124 · Filter by author anon767 opened on Jul 12, 2026
  1

• Add Resend detector

  enhancement
  trufflesecurity/trufflehog#5107 · Filter by author mwoss opened on Jul 2, 2026

• PubNub subscription key verification misses "App Context is not enabled" response

  bug
  trufflesecurity/trufflehog#5099 · Filter by author santhoshpatturaj opened on Jul 1, 2026
  1

• Add PubNub Secret Key (sec-c-) detector

  trufflesecurity/trufflehog#5098 · Filter by author santhoshpatturaj opened on Jul 1, 2026

• Git: support for ref-format=reftable

  enhancement
  trufflesecurity/trufflehog#5019 · Filter by author acdha opened on Jun 4, 2026
  2

  

• Release Windows binaries as .zip to unblock official WinGet inclusion

  enhancement
  trufflesecurity/trufflehog#5010 · Filter by author mcexit opened on Jun 2, 2026