Self-hosted verification
You can use Custom verifiers to set the endpoints for enterprise or non-publicly accessible instances. This will allow TruffleHog to verify secrets against those domains.
Custom verifiers should be set at the root level of the config.yaml file such that they apply globally. Custom verifiers can be configured in your config.yaml file under the customVerifiers field.
We currently support the following verifiers:
- Artifactory
- Bitbucket
- Confluence
- Gitlab
- Github
- Hashicorp Vault
- Jira
You can set the on-premise servers in the local config or on command line.
Example config
Each verifier can include one or more endpoints.
trufflehogAddress: <instance-name>.api.c1.prod.trufflehog.org:8443
trufflehogScannerGroup: <scanner-group-name>
trufflehogScannerToken: thog-agent-<token>
...
customVerifiers:
# Github Enterprise Server
- name: github
endpoints:
- https://github.example.com/api/v3
# Gitlab
- name: gitlab
endpoints:
- https://example.gitlab.com
# JFrog Artifactory (self-hosted) — access token (AKCp...)
- name: ArtifactoryAccessToken
endpoints:
- https://artifactory.example.com
# JFrog Artifactory (self-hosted) — reference token variant
- name: ArtifactoryReferenceToken
endpoints:
- https://artifactory.example.com
# HashiCorp Vault — AppRole auth (role_id + secret_id)
- name: HashiCorpVaultAuth
endpoints:
- https://vault.example.com
# Jira Data Center — Personal Access Token (on-prem only, NOT Jira Cloud)
- name: JiraDataCenterPAT
endpoints:
- https://jira.example.com
# Confluence Data Center — Personal Access Token (on-prem only)
- name: ConfluenceDataCenter
endpoints:
- https://confluence.example.com
# Bitbucket Data Center — Personal Access Token (BBDC- prefix, on-prem only)
- name: BitbucketDataCenter
endpoints:
- https://bitbucket.example.com
...Customizing via command line
You can also set custom verifiers via our open source TruffleHog tool.
In the following example, we scan the currrent directory in our filesystem and pass-in two custom verifier endpoints for Github and one custom verifier endpoint for Gitlab.