Scan CircleCI build logs for credentials. To scan contents of your CI pipeline, see 

CircleCI scanning is only available for local, on-prem scanners right now.

Learn how to effectively scan CircleCI build logs for credentials. It offers a local configuration example in YAML format and highlights the supported capabilities, including scanning build logs and base64 encoded data.

Buildkite

CircleCI

source

Confluence

TruffleHog Docs

Choose your adventure

Creating a scanner

Configuring a scanner

Resource Requirements

Secrets management

Running the scanner

Terminology

Getting started

Artifactory

AWS S3

Azure Repos

Bitbucket

Docker

Filesystem

Gerrit

GitLab

GitHub

Google Cloud Storage (GCS)

Google Drive

Jenkins

Jira

Microsoft Sharepoint

Microsoft Teams

Slack

Vector

Scan data for secrets

Email

JIRA

Splunk

Stdout

Webhook

Notify results

Reverify secrets

Scanning in CI

Pre-commit hooks

Pre-receive hooks

Block secrets from leaking

Systemd

Helm Chart

Kubernetes manifest

Deployment

Custom detectors

Customizing detection

On-premise verification

Customizing TruffleHog

Authentication

Architecture

Compliance

Security and Compliance

Feature	Supported
Scan build logs	✅
Scan base64 encoded data	✅
Scan artifacts	❌
Include Filter	❌
Exclude Filter	❌
Auto resume	✅

CircleCI

Configuration

Web Configuration

Local configuration

Capabilities