Analyze secrets
1 min
Exposed secrets arenβt just a code security issue β theyβre an IAM risk. When a secret leaks, the key questions include: Is the key live? Who owns it? What does the key have access to?
TruffleHog Analyze evaluates access patterns to identify a secretβs metadata, permissions, and resources.
ο»Ώ
To get started with TruffleHog Analyze:
- In open-source: Run trufflehog analyze
- In enterprise: Contact your account executive
ο»Ώ
There are 2 types of TruffleHog Analyzers:
- ο»ΏSelf-discovery analyzersο»Ώ: These analyzers perform non-state-changing API calls to determine resources and permissions of a particular key.
- To see our supported analyzers, visit trufflesecurity.com/analyzersο»Ώ
- Cloud analyze: These analyzers examine cloud secrets by connecting to your cloud environments to determine a secrets IAM posture. This is an enterprise-only feature.
- ο»ΏGCP analyzeο»Ώ is currently supported.