The GitLab integration scans repositories in GitLab. To scan artifacts in GitLab CI, see 

You can configure this integration via the web UI through the integrations tab or you can use a local configuration file as outlined below.

Learn how to integrate GitLab repositories with TruffleHog. It offers YAML code examples for easy local configuration and provides a detailed list of supported options and capabilities. Discover the limitations of th

GitLab

source

GitHub

TruffleHog Docs

Choose your adventure

Creating a scanner

Configuring a scanner

Resource Requirements

Secrets management

Running the scanner

Terminology

Getting started

Artifactory

AWS S3

Azure Repos

Bitbucket

Buildkite

CircleCI

Confluence

Docker

Filesystem

Gerrit

Google Cloud Storage (GCS)

Google Drive

Jenkins

Jira

Microsoft Sharepoint

Microsoft Teams

Slack

Vector

Scan data for secrets

Email

Splunk

Stdout

Webhook

Notify results

Reverify secrets

Scanning in CI

Pre-commit hooks

Pre-receive hooks

Block secrets from leaking

Systemd

Helm Chart

Kubernetes manifest

Deployment

Custom detectors

Customizing detection

On-premise verification

Customizing TruffleHog

Authentication

Architecture

Compliance

Security and Compliance

Key	Description	Required
endpoint	The URL endpoint for the GitLab server. Defaults to GitLab cloud.	No
repositories	List of repository names to scan in GitLab. Omit to enumerate instead.	No
ignoreRepos	List of repository names to ignore in an organization scan. Supports globbing with *.	No
includeRepos	List of repository names to include in an organization scan. Supports globbing with *.	No
skipBinaries	whether to skip scanning binary files	No
skipArchives	whether to skip scanning archive files	No

Feature	Supported
Scan archive files	✅
Scan archived repos	✅
Scan base64 encoded data	✅
Scan binaries	✅
Exclude Filter	✅
Include Filter	✅
Pre-commit	✅
Pre-receive	✅
Scan Gitlab Actions	✅
Auto resume	✅

GitLab

Configuration

Local configuration

Options

Capabilities