tartufo (deprecated)

Disable date: 2027-09-30

Install command: 
brew install tartufo

Searches through git repositories for high entropy strings and secrets

https://tartufo.readthedocs.io/en/stable/

License: GPL-2.0-only

Development: Pull requests

Formula JSON API: /api/formula/tartufo.json

Formula code: tartufo.rb on GitHub

Bottle (binary package) installation support provided.

Current versions:

stable ✅ 6.0.1
head ⚡️ HEAD

Depends on:

pygit2 1.20.1 Bindings to the libgit2 shared library
python@3.15 3.15.2 Interpreted, interactive, object-oriented programming language

Uses from macOS: libffi

Binaries: tartufo

Analytics:

30 days90 days365 days
Installs2070238
Installs on Request2070238
Build Errors0

Known vulnerabilities in the current version:

GHSA-83vg-56qc-22m7 (high) GitPython validates a submodule's ".git" path only after cloning into it (RCE)

Data from Homebrew/advisory-database. Run brew vulns tartufo for a live check.