Join us

ContentUpdates from Truffle Security...
 Activity
@cmndrsp0ck started using tool Docker , 2 days, 19 hours ago.
Story
@laura_garcia shared a post, 3 days ago
Software Developer, RELIANOID

The UK raises the bar on digital security

With cyberattacks on the rise, the Product Security and Telecommunications Infrastructure (PSTI) Act marks a major step toward making connected technology secure by design. In our latest article, we explain: What the PSTI Act requires Why it matters beyond consumer IoT How it signals a global sh..

Story Palark Team
@shurup shared a post, 3 days ago
@palark

New CNCF Sandbox projects in 2025: From Podman to CloudNativePG

Kubernetes

Each year, 25-30 new Open Source projects related to the Cloud Native ecosystem are accepted to the CNCF Sandbox. In January 2025, there were 13 additions, with four of them donated by Red Hat. Here's the list of these newly added CNCF projects: - Podman Container Tools (security-focused Docker alte..

CNCF Sandbox projects in January 2025
Story
@sancharini shared a post, 3 days, 5 hours ago

CI Testing Best Practices for Reliable and Fast Builds

As software teams adopt continuous integration, build speed and reliability become critical success factors. CI testing plays a central role in ensuring that every code change is validated quickly and consistently before it moves further down the delivery pipeline. Without clear practices, however, ..

 Activity
@qballscholar started using tool WordPress , 3 days, 15 hours ago.
 Activity
@qballscholar started using tool Terraform , 3 days, 15 hours ago.
 Activity
@qballscholar started using tool Rancher Kubernetes Engine (RKE2) , 3 days, 15 hours ago.
 Activity
@qballscholar started using tool GitLab CI/CD , 3 days, 15 hours ago.
 Activity
@qballscholar started using tool Amazon Web Services , 3 days, 15 hours ago.
 Activity
@eon01 started using tool k3s , 3 days, 16 hours ago.
Truffle Security is the company behind TruffleHog, one of the most widely used open-source tools for discovering leaked secrets in code repositories, cloud environments, and developer infrastructure. The company focuses on securing the modern software supply chain by detecting exposed credentials early, validating them with high accuracy, and providing actionable remediation workflows.

Their platform supports large-scale scanning across GitHub, GitLab, Bitbucket, CI/CD systems, and enterprise codebases, with specialized products for continuous monitoring and automated alerting. Truffle Security works closely with security researchers and enterprises to reduce the risk of account takeovers, data breaches, and supply chain attacks driven by credential leakage. The company also invests in security research programs that uncover real-world vulnerabilities across open-source ecosystems.