trufflesecurity/trufflehog

Pattern Findings

207 matches across 7 categories. Click a row to expand file-level details.

Fake / Example Data140 hits · 121 pts

Severity	File	Line	Snippet
LOW	pkg/detectors/salescookie/salescookie.go	49	payload := strings.NewReader(`{"date":"2021-07-04T02:47:42.1442597Z","uniqueId":"id-123","revenue":1.3,"profit":-2.5,
LOW	pkg/detectors/salescookie/salescookie.go	49	payload := strings.NewReader(`{"date":"2021-07-04T02:47:42.1442597Z","uniqueId":"id-123","revenue":1.3,"profit":-2.5,
LOW	pkg/engine/ahocorasick/ahocorasickcore_test.go	233	Lorem ipsum dolor sit met, consectetur dipiscing elit. Sed uctor,
LOW	pkg/engine/ahocorasick/ahocorasickcore_test.go	277	Lorem ipsum dolor sit met, consectetur dipiscing elit. Sed uctor,
LOW	pkg/handlers/testdata/nonarchive.txt	1	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	1	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	2	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	2	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	3	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	3	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	4	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	4	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	5	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	5	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	6	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	6	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	7	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	7	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	8	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	8	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	9	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	9	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	10	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	10	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	11	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	11	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	12	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	12	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	13	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	13	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	14	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	14	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	15	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	15	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	16	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	16	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	17	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	17	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	18	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	18	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	19	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	19	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	20	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	20	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	21	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	21	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	22	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	22	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	23	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	23	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	24	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	24	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	25	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	25	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	26	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	26	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	27	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	27	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	28	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
LOW	pkg/handlers/testdata/nonarchive.txt	28	Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed non risus. Suspendisse lectus tortor, dignissim sit amet, a
80 more matches not shown…

Over-Commented Block53 hits · 53 pts

Severity	File	Line	Snippet
LOW	hack/checksecretparts/main.go	1	// checksecretparts is a static analysis tool that finds detector packages
LOW	hack/snifftest/snifftest.sh	1	#!/usr/bin/env bash
LOW	scripts/test/detect_changed_detectors.sh	1	#!/usr/bin/env bash
LOW	scripts/test/detect_changed_detectors.sh	21	# between the two refs. A detector imported at HEAD but not at BASE is new.
LOW	.github/workflows/release.yml	41	- name: Cosign install
LOW	.github/workflows/codeql-analysis.yml	1	# For most projects, this workflow file will not need changing; you simply need
LOW	pkg/pb/source_metadatapb/source_metadata.pb.go	3581	}
LOW	pkg/pb/source_metadatapb/source_metadata.pb.go	3601	// *MetaData_Jira
LOW	pkg/custom_detectors/custom_detectors.go	121	// Permutate each individual match.
LOW	pkg/custom_detectors/custom_detectors.go	241	secret := values[0]
LOW	pkg/iobuf/bufferedreaderseeker.go	21
LOW	…annelmetrics/metrics_collector/prometheus/collector.go	21	var (
LOW	pkg/decoders/escaped_unicode.go	221	return decodeWithPattern(input, htmlEscapePat)
LOW	pkg/decoders/escaped_unicode.go	241	// for _, match := range matches {
LOW	pkg/decoders/escaped_unicode.go	261	// }
LOW	pkg/decoders/utf8.go	81	// This includes letters, digits, punctuation, and symbols, but excludes control characters.
LOW	pkg/decoders/html_test.go	21	//
LOW	pkg/decoders/escaped_unicode_test.go	121	want: &sources.Chunk{
LOW	pkg/sources/job_progress.go	21	EndEnumerating(JobProgressRef, time.Time)
LOW	pkg/sources/sources.go	61
LOW	pkg/sources/sources.go	181	// UnitReporter defines the interface a source will use to report whether a
LOW	pkg/sources/s3/checkpointer.go	21	// The checkpointer maintains state for the current page of objects (up to 1000) using a boolean array
LOW	pkg/sources/s3/checkpointer.go	41	//
LOW	pkg/sources/s3/checkpointer.go	141
LOW	pkg/sources/s3/s3.go	241	bucket string // The bucket name we were processing
LOW	pkg/sources/github_experimental/object_discovery.go	21
LOW	pkg/sources/filesystem/filesystem.go	241	if s.filter != nil && s.filter.ShouldExclude(path) {
LOW	pkg/sources/filesystem/filesystem_test.go	681
LOW	pkg/sources/jenkins/jenkins.go	161	// Example response from http://localhost:8080/api/json?tree=jobs[name,url]{0,100}
LOW	pkg/log/log.go	101	}
LOW	pkg/detectors/detectors.go	21	// Detector defines an interface for scanning for and verifying secrets.
LOW	pkg/detectors/detectors.go	41	}
LOW	pkg/detectors/http.go	201	key, ok := req.Context().Value(dedupKeyContextKey{}).(string)
LOW	pkg/detectors/jwt/jwt.go	181	}
LOW	…/azurecontainerregistry/azurecontainerregistry_test.go	61
LOW	pkg/detectors/coinbase/coinbase_test.go	61	shouldMatch: true,
LOW	pkg/detectors/gcp/gcp_test.go	101	GOOGLE_SERVICE_ACCOUNT_PRIVATE_KEY="-----BEGIN PRIVATE KEY-----\nMIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQCkVEm
LOW	pkg/detectors/postgres/postgres_integration_test.go	41	} else {
LOW	pkg/detectors/aws/session_keys/sessionkey.go	301	// Fortunately, experimentation has also revealed a workaround: simply resubmit the second request. The
LOW	pkg/detectors/azure_storage/storage_test.go	141	// {
LOW	…ectors/zapierwebhook/zapierwebhook_integration_test.go	61	// ctx: context.Background(),
LOW	pkg/engine/engine.go	121	// FilterEntropy filters out unverified results using Shannon entropy.
LOW	pkg/engine/engine.go	501
LOW	pkg/engine/engine.go	1281	continue
LOW	pkg/engine/ahocorasick/ahocorasickcore.go	121	// Core encapsulates the operations and data structures used for keyword matching via the
LOW	pkg/engine/ahocorasick/ahocorasickcore.go	221	d.matches = make([][]byte, len(d.matchSpans))
LOW	pkg/handlers/metrics.go	101	// The handlerType is used as a label for each metric, allowing for differentiation and aggregation of metrics
LOW	pkg/handlers/metrics.go	121	//
LOW	pkg/handlers/handlers.go	21	)
LOW	pkg/handlers/apk.go	61	}
LOW	pkg/handlers/apk.go	141	}
LOW	pkg/handlers/archive.go	41	type archiveHandler struct{ *defaultHandler }
LOW	pkg/handlers/rpm.go	21	}

AI Slop Vocabulary8 hits · 24 pts

Severity	File	Line	Snippet
MEDIUM	pkg/writers/buffered_file_writer/bufferedfilewriter.go	220	// By implementing this method, BufferedFileWriter can leverage optimized data transfer mechanisms provided
MEDIUM	pkg/iobuf/bufferedreaderseeker.go	36	// transparently, providing a seamless reading and seeking experience regardless
MEDIUM	pkg/iobuf/bufferedreaderseeker.go	266	// to utilize the temporary file exclusively, simplifying
MEDIUM	pkg/sources/git/git.go	1524	// TODO: Develop a more robust mechanism to ensure consistent timeout behavior between the command execution
MEDIUM	pkg/detectors/hasura/hasura_test.go	116	// For a more robust comparison, load the results into maps to ignore order.
MEDIUM	…/salesforceoauth2/salesforceoauth2_integration_test.go	150	// Since the order of results can vary with maps, we use a more robust comparison.
MEDIUM	…efreshtoken/salesforcerefreshtoken_integration_test.go	159	// Since the order of results can vary with maps, we use a more robust comparison.
MEDIUM	pkg/engine/engine.go	346	// they're set to reasonable default values. It makes the engine robust to

Self-Referential Comments2 hits · 6 pts

Severity	File	Line	Snippet
MEDIUM	hack/bench/versions.sh	15	# Create a temporary folder to clone the repository
MEDIUM	hack/bench/versions.sh	53	# Initialize the variable to store the sum of user times

Excessive Try-Catch Wrapping2 hits · 3 pts

Severity	File	Line	Snippet
LOW	pkg/custom_detectors/CUSTOM_DETECTORS.md	164	except Exception:
MEDIUM	pkg/custom_detectors/CUSTOM_DETECTORS.md	147	def do_POST(self):

Redundant / Tautological Comments1 hit · 2 pts

Severity	File	Line	Snippet
LOW	action.yml	46	# Check if jq is installed, if not, install it

Verbosity Indicators1 hit · 2 pts

Severity	File	Line	Snippet
LOW	pkg/output/plain.go	121	// To have the "UNKNOWN_POSTMAN = 0" value be assigned correctly to the field, we need to check if the Postman workspac

Score History

Severity Breakdown

Pattern Findings