我正在使用
trufflehog_3.33.0_linux_amd64.tar.gz
来检测密码和令牌。
实际上我有硬编码的令牌和密码,并将它们提交到我的 github 存储库中。但是当我尝试扫描时,它没有找到令牌和密码。
$ ./trufflehog git [email protected]:org-demo/test.git --only-verified
2023-05-02T09:57:50+05:30 info-0 trufflehog loaded decoders {"count": 3}
2023-05-02T09:57:50+05:30 info-0 trufflehog loaded detectors {"total": 737, "verification_enabled": 737, "verification_disabled": 0}
2023-05-02T09:57:50+05:30 info-0 trufflehog possible duplicate detector configured {"detector": "Square"}
🐷🔑🐷 TruffleHog. Unearth your secrets. 🐷🔑🐷
以上命令找不到密码和令牌。但是在我的存储库文件中,我有如下密码和令牌。
USERNAME="user"
PASSWORD="password"
HTTP_USER="user1"
HTTP_TOKEN="DRFuteQw$#riYhte69AwerDdf-$"
"""
Can I know what is the issue with my command? Why it is not finding password & token?
Any help would be appreciated