Engineering deep-dive into TruffleHog's high-performance git scanning engine.
TruffleHog's git scanner processes repositories at over 1GB/s by operating directly on git objects rather than checking out files. This post explains how we parse packfiles, handle delta chains, manage memory for large repositories, and parallelize scanning across CPU cores. We also share benchmarks against other secret scanning tools.