##### Categories

Static Application Security Testing (SAST)

##### Integrates With

Trufflehog  
Trufflehog3

##### Import Options

API Import  
UI Import  
Universal Importer (Pro)

##### File Types

JSON

##### Integrations

# Trufflehog

[TruffleHog](https://trufflesecurity.com/) is a high-performance secrets scanning tool designed to detect and verify accidentally committed sensitive information, such as API keys, passwords, and private tokens, across code repositories and CI/CD pipelines. This integration allows security teams to automate the ingestion of identified vulnerabilities into DefectDojo, enabling centralized management and proactive remediation of credential leaks before they can be exploited.

[Docs](https://docs.defectdojo.com/supported_tools/parsers/file/trufflehog/)