Trufflehog 找不到密码和令牌

问题描述 投票:0回答:0

我正在使用

trufflehog_3.33.0_linux_amd64.tar.gz
来检测密码和令牌。

实际上我有硬编码的令牌和密码,并将它们提交到我的 github 存储库中。但是当我尝试扫描时,它没有找到令牌和密码。

$ ./trufflehog git [email protected]:org-demo/test.git --only-verified
2023-05-02T09:57:50+05:30       info-0  trufflehog      loaded decoders {"count": 3}
2023-05-02T09:57:50+05:30       info-0  trufflehog      loaded detectors        {"total": 737, "verification_enabled": 737, "verification_disabled": 0}
2023-05-02T09:57:50+05:30       info-0  trufflehog      possible duplicate detector configured  {"detector": "Square"}
🐷🔑🐷  TruffleHog. Unearth your secrets. 🐷🔑🐷

以上命令找不到密码和令牌。但是在我的存储库文件中,我有如下密码和令牌。

USERNAME="user"
PASSWORD="password"

HTTP_USER="user1"
HTTP_TOKEN="DRFuteQw$#riYhte69AwerDdf-$"
"""

Can I know what is the issue with my command? Why it is not finding password & token?

Any help would be appreciated
git security devops devsecops
© www.soinside.com 2019 - 2024. All rights reserved.