Join us

ContentUpdates and recent posts about TruffleHog..
Link
@faun shared a link, 4 months ago
FAUN.dev()

Automating infrastructure deployments in the Cloud with Terraform and Azure Pipelines

This Azure lab wires upTerraformwithAzure Pipelines CI/CDto spin up infrastructure and deploy a .NET Core app using IaC. It handles remote state with Azure Storage, automatesplanandapplyin pipelines, and swaps in config values via token replacement during deploy... read more  

Link
@faun shared a link, 4 months ago
FAUN.dev()

Writing a basic service for GNU Guix

A developer walks through building acustom GNU Guix system serviceforkmonad—yes, the keyboard remapper—by wiring up a newservice-typethat plugs intoShepherdandaccount-service-type. To get there, they lift patterns from services likewesnothd, usemake-forkexec-constructorto spin up the daemon, and de.. read more  

Link
@faun shared a link, 4 months ago
FAUN.dev()

Beyond IAM access keys: Modern authentication approaches for AWS

AWS wants long-term IAM access keys gone. In their place:temporary creds via IAM roles,IAM Identity Center,CloudShell, andOIDC integrations. The push covers everything—CLI tools, local dev, compute, CI/CD, even old-school on-prem. The message is clear: rotate automatically, grant minimally, and sto.. read more  

Link
@faun shared a link, 4 months ago
FAUN.dev()

Zero Trust and Cloud-Native Windows

Microsoft’s moving the cheese again—this time steering Windows deep into the cloud. The old on-prem management playbook? Getting dusty. At the core:Intune, pushingZero Trustlike it means it. Identity-based access, always-on compliance, real-time config—no more trusting the device just because it’s .. read more  

Link
@faun shared a link, 4 months ago
FAUN.dev()

Supply chain attack compromises npm packages to spread backdoor malware

A fresh supply chain ambush—Scavenger—slipped into npm through the front door. Attackers phished maintainers of high-profile packages likeis,eslint-plugin-prettier, andsynckit, then dropped cross-platform JavaScript malware straight into the codebase. Real-time C2 channels included. They typosquatt.. read more  

Link
@faun shared a link, 4 months ago
FAUN.dev()

Creating a GitHub App based Azure DevOps Pipelines Service Connection

Azure DevOps made it easier to link up with GitHub—no more re-installing the Azure Pipelines GitHub App to kick things off. Teams can spin up aGitHub App–based service connectiondirectly from a dummy pipeline setup. The service connection comes GitHub App–authenticated out of the gate. Super handy .. read more  

Creating a GitHub App based Azure DevOps Pipelines Service Connection
Link
@faun shared a link, 4 months ago
FAUN.dev()

Cloudflare and the infinite sadness of migrations

A recent Cloudflare DNS outage traced back to legacy gear tangled with global config changes. Turns out, incomplete migrations can still pack a punch. Their newer topology system does support progressive rollouts—but running it side-by-side with the old one just made the blast radius bigger. System.. read more  

Cloudflare and the infinite sadness of migrations
Link
@faun shared a link, 4 months ago
FAUN.dev()

Amazon DocumentDB Serverless is now available

Amazon DocumentDB Serverless is out of preview and ready to roll. It auto-scales compute and memory usingDCUsfor MongoDB-compatible clusters. No migration needed—just upgrade your existing instance and go. Available starting in version5.0, with per-second billing based on DCU burn. What’s new:Fixed.. read more  

Link
@faun shared a link, 4 months ago
FAUN.dev()

From Borg to Broken: why Kubernetes 2.0 is an apology letter

Kubernetes 2.0 is kicking YAML to the curb.After years of living and breathing.yamlfiles, the project is eyeing a hard break. Maintainers haven’t said it outright, but the message is clear: YAML isn’t cutting it anymore. System shift:This could signal a real usability reboot—maybe even a less painf.. read more  

From Borg to Broken: why Kubernetes 2.0 is an apology letter
Link
@faun shared a link, 4 months ago
FAUN.dev()

vCluster: The Performance Paradox – How Virtual Clusters Save Millions Without Sacrificing Speed

vClustercuts Kubernetes infra costs by running virtual clusters as pods inside a shared host. No more spinning up full control planes for every tenant. Itslean Syncerfilters API traffic to keep clusters from melting down.Shared controllersand a built-insleep modekeep idle workloads quiet—and cheap... read more  

TruffleHog is a high-accuracy secret-detection tool designed to uncover exposed credentials such as API keys, tokens, private keys, and cloud secrets across large codebases. Originally created to scan Git commit history, it has evolved into a multi-source scanning engine capable of analyzing GitHub, GitLab, Bitbucket, Docker images, file systems, Terraform states, and cloud environments.

The scanner combines entropy detection, an extensive library of regular expression detectors, and live credential validation to minimize false positives. TruffleHog is widely used in security research, supply chain security, DevSecOps workflows, and bug bounty programs. Its speed, accuracy, and broad ecosystem coverage make it a core tool for identifying and preventing credential leakage in modern software development.