2025 June
The following items were released throughout the month of June 2025 in TruffleHog.
Improve Response
Features here help teams act faster and more effectively when secrets are found. These capabilities streamline investigation, triage, and collaboration, enabling quicker remediation and reducing risk.
What's New
- New Analyzers in Open Source and Enterprise Edition, including plaid, netlify, fastly personal token, monday, datadog token, ngrok, mux, posthog, dropbox, databricks, jira
- Benefits: Expanded analyzer coverage to more secret types, enabling faster, broader response to potential exposures
- Availability: Available in Enterprise Edition and in Open Source
Find More Secrets
Features here focus on growing coverage across more areas within an environment, and expanding detection coverage and secret types, ensuring no secrets slip through the cracks.
Whatβs New
- New Detectors and Key Types:
- Including:
- Salesforce OAuth2
- Lokalise
- Bannerbear
- Langsmith
- Benefits: Expanded detection capabilities help identify more secret types, improving coverage and reducing the risk of credential exposure across your stack
- Brings the total to 806 active detectors supporting 848 different key types
- Availability: Available in Enterprise Edition and in Open Source
Ease Administration
Features here are aimed at simplifying ongoing management of the Truffle Security platform including integration setup and user administration.
Whatβs New
- From the Remediations tab on the Secret Details, you can now manually resend or sync Jira notifications
- Benefits: Take control of Jira, even after detection, with seamless manual sending and syncing options
- NOTE: Does not include bulk actions, auto-syncing, or Jira Cloud with autoclose
- Availability: Generally Available in Enterprise Edition
Jira syncing is for those that have the autoclose enabled, which is in Limited Availability. If the ticket gets closed in Jira but remains LIVE in truffle, you can press the button and reopen the ticket.
- TruffleHog Open Source now support config files
- Benefits: Allows Open Source users to run multiple scans concurrently. Can be used to troubleshoot Enterprise integration issues that are supported in Open Source as well
- Availability: Generally Available in Open Source
- Previously implemented filtering and sorting on the Integrations page if over 25 integrations were added. Now, we are always show integration filters and sorting regardless of the number of deployed integrations
- Benefits: Quickly find and manage integrations with consistent filtering and sorting, no matter how many are deployed
- Availability: Generally Available in Enterprise Edition
- TruffleHog is now generating notifications if a Secret goes from not live to live
- Benefits: Stay informed of newly live secrets in real time to reduce risk and respond faster
- Availability: Generally Available in Enterprise Edition
- Added an animation to sync icon for real-time scanning
- Benefits: Easily see when real-time scanning is active with a clear, animated sync icon
- Availability: Generally Available in Enterprise Edition
- Introducing smarter scans for File Systems (formerly known as Scan Jobs Reports)
- Does the following:
- Shows more details into what assets within an integration were scanned
- Whether the scan completed successfully
- The status of an actively running scan
- Information from the last scan, including its runtime
- The ability to start a scan before the full details about its assets are known
- Automatically split up the work by running multiple scanners for the same source Integration
- If a scan stops, it will resume where it left off without having to enumerate that asset again
- Already in GitHub scans
- Benefits: Smarter scans provide clearer visibility, faster results, and greater reliability by showing detailed scan progress, enabling early scan starts, auto-parallelizing tasks, and resuming where they left off. This can reduce friction and improve coverage across integrations
- Availability: Limited Availability in Enterprise Edition
Smarter Scans allows for parallelization based on configured paths. This means multiple scanners can work simultaneously on different paths, improving the overall speed of the scan. The number of parallel workers is limited by the number of paths listed in the configuration.
- With all the enhancements we are making with scans, we are also adding sorting. Users will be able to sort an active scan by repository name, status, duration, verified secrets count. To view this area, go to the βActive scansβ on the Dashboard and expand a scan
- Benefits: Allows you to readily find the deployed integrations you are looking for
- Availability: Limited Availability in Enterprise Edition
ο»Ώ