The GitLab integration scans repositories in GitLab. To scan artifacts in GitLab CI, see 

You can configure this integration to run through the integration wizard on the frontend or you can use a local configuration file as outlined below.

Learn how to integrate GitLab repositories with TruffleHog. It offers YAML code examples for easy local configuration and provides a detailed list of supported options and capabilities. Discover the limitations of th

GitLab

source

GitHub

TruffleHog Docs

Choose your adventure

Creating a scanner

Configuring a scanner

Resource Requirements

Secrets management

Running the scanner

Terminology

Getting started

Artifactory

AWS S3

Azure Repos

BitBucket

Buildkite

CircleCI

Confluence

Docker

Filesystem

Gerrit

Google Cloud Storage (GCS)

Google Drive

Jenkins

Jira

Microsoft Sharepoint

Microsoft Teams

Slack

Vector

Scan data for secrets

Email

JIRA

Splunk

Stdout

Webhook

Notify results

Reverify secrets

Scanning in CI

Pre-commit hooks

Pre-receive hooks

Block secrets from leaking

Systemd

Helm Chart

Kubernetes manifest

Deployment

Custom detectors

Customizing detection

On-premise verification

Customizing TruffleHog

Authentication

Architecture

Compliance

Security and Compliance

Key	Description	Required
endpoint	The URL endpoint for the GitLab server	No
repositories	List of repository names to scan in GitLab. Omit to enumerate instead.	No
ignoreRepos	List of repository names to ignore in the scanning process	No
skipBinaries	whether to skip scanning binary files	No
skipArchives	whether to skip scanning archive files	No

Feature	Supported
Scan archive files	✅
Scan archived repos	✅
Scan base64 encoded data	✅
Scan binaries	✅
Exclude Filter	✅
Include Filter	✅
Pre-commit	✅
Pre-receive	✅
Scan Gitlab Actions	✅
Auto resume	✅

TruffleHog Docs

GitLab

Configuration

Local configuration

Options

Capabilities