Auto-sync: 2026-04-16 13:01
This commit is contained in:
18
wiki/entities/TruffleHog.md
Normal file
18
wiki/entities/TruffleHog.md
Normal file
@@ -0,0 +1,18 @@
|
||||
---
|
||||
title: "TruffleHog"
|
||||
type: entity
|
||||
tags: [security, secret-scanning, devops]
|
||||
date: 2026-04-16
|
||||
---
|
||||
|
||||
## Overview
|
||||
TruffleHog 是 Git 预推送钩子工具,检测代码和配置中硬编码的 API key、token、密码等密钥信息,防止敏感信息泄露到远程仓库。
|
||||
|
||||
## Key Use Case
|
||||
- 在 git push 前扫描所有文件中的硬编码密钥
|
||||
- 与 CI/CD 管道集成
|
||||
- 阻止 AI Agent 意外将密钥写入代码
|
||||
|
||||
## Connections
|
||||
- [[Self-Healing-Home-Server]]:家庭基础设施安全的必要组件
|
||||
- [[DevSecOps]]:DevOps 安全支柱工具
|
||||
Reference in New Issue
Block a user