Reverify secrets

2min



Whenever TruffleHog scans an integrated source, it will attempt to verify each secret it finds. On each subsequent interval scan, TruffleHog will re-verify the previously discovered live secrets. However, if you don't want to wait for a full scan to in order to reverify whether or not a secret has been rotated, you can request that TruffleHog verify only an individual secret from the "Actions" dropdown in the Secret Details page:

A screenshot of the "Actions" dropdown that contains the "Reverify secret" option
The option can be found in the "Actions" dropdown


(This can also be triggered via API - see the API documentation for details.) This option causes the associated scanner to run a small job that targets the particular secret in question.

Secret reverification is currently only supported for secrets that have been detected within a GitHub integration.