Your message dated Mon, 10 Aug 2026 13:00:43 +0000
with message-id <[email protected]>
and subject line Bug#1128347: fixed in trufflehog 3.60.0-1
has caused the Debian Bug report #1128347,
regarding ITP: trufflehog -- Find, verify, and analyze leaked credentials
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1128347: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1128347
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: wnpp
Severity: wishlist
Owner: Mikhail Potemkin <[email protected]>
* Package name : trufflehog
Version : 3.60.4-1
Upstream Author : Truffle Security
* URL : https://github.com/trufflesecurity/trufflehog
* License : GNU Affero General Public License v3.0
Programming Lang: Go
Description : Find, verify, and analyze leaked credentials
What is TruffleHog π½
.
TruffleHog is the most powerful secrets **Discovery, Classification,
Validation,** and **Analysis** tool. In this context, secret refers to a
credential a machine uses to authenticate itself to another machine.
This includes API keys, database passwords, private encryption keys, and
more.
.
Discovery π
.
TruffleHog can look for secrets in many places including Git, chats,
wikis, logs, API testing platforms, object stores, filesystems and more.
.
Classification π
.
TruffleHog classifies over 800 secret types, mapping them back to the
specific identity they belong to. Is it an AWS secret? Stripe secret?
Cloudflare secret? Postgres password? SSL Private key? Sometimes it's
hard to tell looking at it, so TruffleHog classifies everything it
finds.
.
Validation β
.
For every secret TruffleHog can classify, it can also log in to confirm
if that secret is live or not. This step is critical to know if thereβs
an active present danger or not.
.
Analysis π¬
.
For the 20 some of the most commonly leaked out credential types,
instead of sending one request to check if the secret can log in,
TruffleHog can send many requests to learn everything there is to know
about the secret. Who created it? What resources can it access? What
permissions does it have on those resources?
--- End Message ---
--- Begin Message ---
Source: trufflehog
Source-Version: 3.60.0-1
Done: Mikhail Potemkin <[email protected]>
We believe that the bug you reported is fixed in the latest version of
trufflehog, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Mikhail Potemkin <[email protected]> (supplier of updated trufflehog package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 28 Apr 2026 16:25:06 +0000
Source: trufflehog
Binary: trufflehog
Architecture: source amd64
Version: 3.60.0-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Packaging Team <[email protected]>
Changed-By: Mikhail Potemkin <[email protected]>
Description:
trufflehog - Find, verify, and analyze leaked credentials (program)
Closes: 1128347
Changes:
trufflehog (3.60.0-1) unstable; urgency=medium
.
* Initial release, with eight dependencies included, all small and
unlikely to have other consumers in Debian and not worth packaging
separately (Closes: #1128347)
Checksums-Sha1:
aae9b1b2b66d10fd1e9e560450df1ac6f06bdfbf 5290 trufflehog_3.60.0-1.dsc
b177623038c60c0a5e95dd6ed80c6b1f9c7111ec 2840549 trufflehog_3.60.0.orig.tar.gz
fa910c3031e31c4f9d69ff5389822f56f0537d75 49356
trufflehog_3.60.0-1.debian.tar.xz
7ce1c5e7fa4cfca7a9b9149a6b7659c3298525c7 38755
trufflehog_3.60.0-1_amd64.buildinfo
1ba90dd2a4bdd1d1922f533810a73f5c032e4514 17506632 trufflehog_3.60.0-1_amd64.deb
Checksums-Sha256:
6e54bd6beded9f11bff6552211238fefe78f9a4c760418c28b7c7f72d6f3826d 5290
trufflehog_3.60.0-1.dsc
a38b2932f2f255f80e5c403f48dab453f96bcc280fdcd8c49c878fcad89bc739 2840549
trufflehog_3.60.0.orig.tar.gz
36991f93d85c0f9d8602f85acc44efc694fb459254d3329ff4fe6275ecd2825a 49356
trufflehog_3.60.0-1.debian.tar.xz
89856d056fa67a9fd0bca66f7cb2315ff2f870fec971afa295dd45e94e810394 38755
trufflehog_3.60.0-1_amd64.buildinfo
4fa26ed14ee2ec3c5b9d1233ce2b0e5f2fbeae3ddc7a9e2ce699b3310567329a 17506632
trufflehog_3.60.0-1_amd64.deb
Files:
5c878692e078263337d377cbd389c82f 5290 golang optional trufflehog_3.60.0-1.dsc
b2e4f7101dab9f26108e247147aeaf62 2840549 golang optional
trufflehog_3.60.0.orig.tar.gz
b594ab2ae74d633817de3e38db85397a 49356 golang optional
trufflehog_3.60.0-1.debian.tar.xz
7c9e5bd000328d9349646655648fda92 38755 golang optional
trufflehog_3.60.0-1_amd64.buildinfo
2734611f5e9488fc9cb86f9ad63b42d0 17506632 utils optional
trufflehog_3.60.0-1_amd64.deb
-----BEGIN PGP SIGNATURE-----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=JwSM
-----END PGP SIGNATURE-----
pgp84iZAy0vux.pgp
Description: PGP signature
--- End Message ---
