Customizing TruffleHog
On-premise verification
3min
you can use custom verifiers to set the endpoints for enterprise or non publicly accessible instances this will allow trufflehog to verify secrets against those domains custom verifiers should be set at the root level of the config yaml file such that they apply globally custom verifiers can be configured in your config yaml file under the customverifiers field we currently support the following verifiers github and gitlab you can set the on premise servers in the local config or on command line example config each verifier can include one or more endpoints basic auth trufflehogaddress \<instance name> api c1 prod trufflehog org 8443 trufflehogscannergroup \<scanner group name> trufflehogscannertoken thog agent \<token> customverifiers \ name gitlab endpoints \ https //example gitlab com \ name github endpoints \ https //example github com customizing via command line you can also set custom verifiers via our open source trufflehog tool in the following example, we scan the currrent directory in our filesystem and pass in two custom verifier endpoints for github and one custom verifier endpoint for gitlab trufflehog filesystem verifier github=example1 github com,example2 github com verifier gitlab=example1 gitlab com