Reverify secrets
2min
Whenever TruffleHog scans an integrated source, it will attempt to verify each secret it finds. On each subsequent interval scan, TruffleHog will re-verify the previously discovered live secrets. However, if you don't want to wait for a full scan to in order to reverify whether or not a secret has been rotated, you can request that TruffleHog verify only an individual secret from the "Actions" dropdown in the Secret Details page:
The option can be found in the "Actions" dropdown
(This can also be triggered via API - see the API documentation for details.) This option causes the associated scanner to run a small job that targets the particular secret in question.
Secret reverification is currently only supported for secrets that have been detected within a GitHub integration.
Updated 20 Sep 2024
Did this page help you?