Join us

ContentUpdates and recent posts about TruffleHog..
 Activity
@ishanupadhyay started using tool GitHub Actions , 1 day, 14 hours ago.
 Activity
@ishanupadhyay started using tool Flask , 1 day, 14 hours ago.
 Activity
@ishanupadhyay started using tool FastMCP , 1 day, 14 hours ago.
 Activity
@ishanupadhyay started using tool Docker , 1 day, 14 hours ago.
 Activity
@ishanupadhyay started using tool Argo CD , 1 day, 14 hours ago.
 Activity
@ishanupadhyay started using tool Amazon Web Services , 1 day, 14 hours ago.
News FAUN.dev() Team
@kala shared an update, 1 day, 16 hours ago
FAUN.dev()

NanoClaw + Docker Sandboxes: Secure Agent Execution Without the Overhead

Docker NanoClaw Claude Code

NanoClaw integrates with Docker Sandboxes to enhance AI agent security through strong isolation and transparency. This collaboration focuses on enabling secure and autonomous operations for AI agents within enterprise environments.

Link
@varbear shared a link, 1 day, 17 hours ago
FAUN.dev()

The real cost of random I/O

Therandom_page_costwas introduced ~25 years ago, and its default value has remained at 4.0 since then. Recent experiments suggest that the actual cost of reading a random page may be significantly higher than the default value, especially on SSDs. Lowering therandom_page_costmay not always be the be.. read more  

The real cost of random I/O
Link
@varbear shared a link, 1 day, 17 hours ago
FAUN.dev()

Interview with Thomas Wouters - release Manager for Python

The interview traces Python's core evolution. It starts with addingaugmented assignment(+=) and thePEP 203debates. Arguments followed. Nested scopeslanded viafuture imports. Maintainers repackagedelementtree/xmlplususingpath. asynciorose and supplantedTwisted. Python moved toyearly releases... read more  

Link
@varbear shared a link, 1 day, 17 hours ago
FAUN.dev()

Things I miss about Spring Boot after switching to Go

The author migrated fromJava/Spring BoottoGolang. Spring bundlesSecurity,Data,Actuator, and auto-wiring. Go prefers minimalist libraries and explicit wiring. It produces static binaries, instant startup, lower memory use, and nativegoroutineconcurrency. Spring needs JVM startup and GC tuning... read more  

Things I miss about Spring Boot after switching to Go
TruffleHog is a high-accuracy secret-detection tool designed to uncover exposed credentials such as API keys, tokens, private keys, and cloud secrets across large codebases. Originally created to scan Git commit history, it has evolved into a multi-source scanning engine capable of analyzing GitHub, GitLab, Bitbucket, Docker images, file systems, Terraform states, and cloud environments.

The scanner combines entropy detection, an extensive library of regular expression detectors, and live credential validation to minimize false positives. TruffleHog is widely used in security research, supply chain security, DevSecOps workflows, and bug bounty programs. Its speed, accuracy, and broad ecosystem coverage make it a core tool for identifying and preventing credential leakage in modern software development.