TruffleHog's secret verification system is now fully open source.
The verification engine that powers TruffleHog's ability to distinguish active vs. inactive credentials is now open source. The engine supports verification for 700+ secret types across AWS, GCP, Azure, GitHub, Slack, Stripe, and hundreds more. We explain the architecture, how to add new verifiers, and the safety measures built into the verification process.