Replaces manual git history audits for sensitive data leaks. It utilizes high-entropy string detection to identify secrets across all branches and historical commits.
Tech Stack
PythonDevOps & CI/CD
Why tartufo?
• Scans entire commit history
• High-entropy string detection
• Extensible regex rules
Limitations
• High false positive rate
• CLI only interface
• Resource intensive on large repos
2/22/2026
Last Update
71
Forks
48
Issues
GPL-2.0
License
Financial Leak Detected
Stop the "SaaS Tax"
Your team could be burning cash. Switching to tartufo instantly boosts your runway.
