Feature
Trufflehog-verified is always private
When trufflehog confirmed a credential with its provider, the finding is private whatever the classifier says.
A trufflehog-verified finding means trufflehog checked the value against the provider and it worked. The trufflehog filter escalates it to private regardless of the classifier’s verdict.
The one exception: a whole-file exception drops a finding before it is classified.
More features
All features →- 01
Three verdicts, one gate
Every finding gets exactly one verdict:
private,publicortriage. Onlyprivatefails the gate. - 02
Value rules before name rules
Rules on the shape of the value run before rules on the variable name, so a public-looking name never hides a private value.
- 03
Counts-only output
Reports carry counts, paths, lines, rule names and fingerprints. A raw secret value is never printed.