Join us

ContentUpdates from Truffle Security...
Story Palark Team
@shurup shared a post, 2 days, 16 hours ago
@palark

New CNCF Sandbox projects in 2025: From Podman to CloudNativePG

Kubernetes

Each year, 25-30 new Open Source projects related to the Cloud Native ecosystem are accepted to the CNCF Sandbox. In January 2025, there were 13 additions, with four of them donated by Red Hat. Here's the list of these newly added CNCF projects: - Podman Container Tools (security-focused Docker alte..

CNCF Sandbox projects in January 2025
Story
@sancharini shared a post, 2 days, 21 hours ago

CI Testing Best Practices for Reliable and Fast Builds

As software teams adopt continuous integration, build speed and reliability become critical success factors. CI testing plays a central role in ensuring that every code change is validated quickly and consistently before it moves further down the delivery pipeline. Without clear practices, however, ..

 Activity
@qballscholar started using tool WordPress , 3 days, 7 hours ago.
 Activity
@qballscholar started using tool Terraform , 3 days, 7 hours ago.
 Activity
@qballscholar started using tool Rancher Kubernetes Engine (RKE2) , 3 days, 7 hours ago.
 Activity
@qballscholar started using tool GitLab CI/CD , 3 days, 7 hours ago.
 Activity
@qballscholar started using tool Amazon Web Services , 3 days, 7 hours ago.
 Activity
@eon01 started using tool k3s , 3 days, 8 hours ago.
 Activity
@mjh started using tool Rust , 3 days, 8 hours ago.
Truffle Security is the company behind TruffleHog, one of the most widely used open-source tools for discovering leaked secrets in code repositories, cloud environments, and developer infrastructure. The company focuses on securing the modern software supply chain by detecting exposed credentials early, validating them with high accuracy, and providing actionable remediation workflows.

Their platform supports large-scale scanning across GitHub, GitLab, Bitbucket, CI/CD systems, and enterprise codebases, with specialized products for continuous monitoring and automated alerting. Truffle Security works closely with security researchers and enterprises to reduce the risk of account takeovers, data breaches, and supply chain attacks driven by credential leakage. The company also invests in security research programs that uncover real-world vulnerabilities across open-source ecosystems.