One leaked credential can silently compromise your entire SaaS stack. Find out the 6 critical risks you need to know.

TRUFFLEHOG

CUSTOMERS

COMPANY

RESOURCES

LOG IN

Contact Us

One leaked credential can silently compromise your entire SaaS stack. Find out the 6 critical risks you need to know.

Luke Marshall

The Dig

Preventing a medical supply chain attack by revoking this Docker API key, and hash digest pinning

Preventing a medical supply chain attack by revoking this Docker API key, and hash digest pinning

Luke Marshall


More from THE DIG

Thoughts, research findings, reports, and more from Truffle Security Co.

Google Fixes the Gemini API Key Privilege Escalation Issue

Your PR scan is missing half the problem

Admin on Apache Org Exposed for 2.5 Years in Deleted PyPI Package

The Dig

Thoughts, research findings, reports, and more from Truffle Security Co.

Google Fixes the Gemini API Key Privilege Escalation Issue

Your PR scan is missing half the problem

STAY STRONG

DIG DEEP

TRUFFLEHOG

Open-source

Enterprise

Analyze

GCP Analyze

NEW!

Forager

Security

Integrations

Pricing

CUSTOMERS

COMPANY

About

Careers

Press

FAQ

Partners

NEW!

Contact us

RESOURCES

Blog

Newsletter

Library

Events

Videos

GitHub

Enterprise docs

Open-source docs

How to rotate

Brand assets

NEW!

DOING IT THE RIGHT WAY

SINCE 2021

#trufflehog-community

#Secret Scanning

© 2026 Truffle Security Co.

Privacy policy

Terms and conditions

Data processing agreement

Acceptable use policy

STAY STRONG

DIG DEEP

#trufflehog-community

#Secret Scanning

© 2026 Truffle Security Co.

Privacy policy

Terms and conditions

Data processing agreement

Acceptable use policy

infra