Join us

ContentUpdates and recent posts about TruffleHog..
 Activity
@derynleigh started using tool Akamai , 3 weeks, 6 days ago.
Story
@laura_garcia shared a post, 3 weeks, 6 days ago
Software Developer, RELIANOID

🔐 RELIANOID & NIST Cybersecurity Framework Alignment

At RELIANOID, security is built into both our Load Balancer and our internal operations. We align our product and organizational practices with the NIST Cybersecurity Framework (CSF) across its five core functions: Identify, Protect, Detect, Respond, and Recover. ✔️ Consistent security controls acro..

NIST Cybersecurity Framework RELIANOID compliance
Link
@varbear shared a link, 3 weeks, 6 days ago
FAUN.dev()

Goodbye Microservices

Twilio Segment collapsed 140+ destination-specific microservices into asingle monolith, one repo, one set of dependencies, one test harness. They leveled out version sprawl and builtTraffic Recorder, a homegrown yakbak-based HTTP playback tool. That killed off hours-long test runs, dropping them to.. read more  

Link
@varbear shared a link, 3 weeks, 6 days ago
FAUN.dev()

Why I Didn’t Sign the Resonant Computing Manifesto: The Foundations Need Work

A sharp critique of theResonant Computing Manifestopushes it past vague ideals. It calls for real governance scaffolding, not just poetic prose. Without that? The manifesto risks becoming just another glossy PDF for entrenched players to wave around while changing nothing. Under the hood:What’s real.. read more  

Why I Didn’t Sign the Resonant Computing Manifesto: The Foundations Need Work
Link
@varbear shared a link, 3 weeks, 6 days ago
FAUN.dev()

Rust unit testing: file writing

To test file writes without hitting the disk, the author swaps in a closure that takes a file handle. That handle’s a test double, so after the code runs, you can crack it open and inspect what got written... read more  

Link
@varbear shared a link, 3 weeks, 6 days ago
FAUN.dev()

Full Unicode Search at 50× ICU Speed with AVX‑512

StringZilla v4.5drops a major speed bomb on Unicode text processing. Think10× faster tokenization and case folding. Up to150× faster for case-insensitive substring search. It leaves ICU and PCRE2 wheezing in the dust. Under the hood: SIMD all the way, AVX-512 on newer chips, plus script-aware SIMD k.. read more  

Full Unicode Search at 50× ICU Speed with AVX‑512
Link
@varbear shared a link, 3 weeks, 6 days ago
FAUN.dev()

pqr.sql: Generate QR Codes with Pure SQL in PostgreSQL

A developer jammed out aQR code generator in pure SQL, just PostgreSQL, no extensions or libraries. One gnarly single-statement query. It even runs faster onPostgreSQL 17than on 16, thanks to engine tweaks... read more  

pqr.sql: Generate QR Codes with Pure SQL in PostgreSQL
Link
@varbear shared a link, 3 weeks, 6 days ago
FAUN.dev()

5 engineering dogmas it's time to retire

Dependencies are risky, especially in smaller companies - avoid unnecessary packages to prevent security incidents and maintain code simplicity. Feature flags can become overwhelming if abused, leading to complex codebases and false sense of security - use them wisely. Commenting code is a balance -.. read more  

Link
@kaptain shared a link, 3 weeks, 6 days ago
FAUN.dev()

Dapr Deployment Models

Daprstarted as a humble Kubernetes sidecar. Now? It's a full-blownmulti-mode runtimethat runs wherever you need it,edge,VM, orserverless APIs. Diagrid’sCatalysttakes that further. It wraps Dapr in a fully managed API layer that’s detached from your app’s lifecycle. No infra lock-in, just token-based.. read more  

Dapr Deployment Models
Link
@kaptain shared a link, 3 weeks, 6 days ago
FAUN.dev()

v1.35: Job Managed By Goes GA

In Kubernetes v1.35,spec.jobControllerManagedByhits GA. That means full handoff of Job reconciliation to external controllers is now official. It unlocks tricks likeMultiKueue, where a single management cluster fires off Jobs to multiple worker clusters, without losing sight of what’s running where... read more  

TruffleHog is a high-accuracy secret-detection tool designed to uncover exposed credentials such as API keys, tokens, private keys, and cloud secrets across large codebases. Originally created to scan Git commit history, it has evolved into a multi-source scanning engine capable of analyzing GitHub, GitLab, Bitbucket, Docker images, file systems, Terraform states, and cloud environments.

The scanner combines entropy detection, an extensive library of regular expression detectors, and live credential validation to minimize false positives. TruffleHog is widely used in security research, supply chain security, DevSecOps workflows, and bug bounty programs. Its speed, accuracy, and broad ecosystem coverage make it a core tool for identifying and preventing credential leakage in modern software development.