Run truffleHog on directories recusively and not just in git repos

[michaelgrifalconi]

I would assume it's easy to setup a dummy git repo and scan it, but would be nice to use the tool to scan any file or directory even outside git.

One example is to scan database dumps of project trackers (jira)

[dxa4481]

I've got a script here that scans archives, tar.gz's, will this work for you?

https://github.com/dxa4481/santaHog/blob/master/santaHog/scan_archives.py

[avanier]

I'll add making a PR for this on my to-do list.

[Miserlou]

+1 for this - I'm not sure why git is necessary, I'd like to use this on some dump files!

[BBerastegui]

There is already a pull request on this: #37

It's waiting for approval.

[mykter]

https://github.com/feeltheajf/truffleHog3 implemented this feature.

[dustin-decker]

Hey there, we've just released the next major version of TruffleHog!

It includes a new filesystem scanner to do this!

It is a complete rewrite that scans more data sources and now supports detecting and verifying over 600 credentials.
Please check it out when you can.

https://trufflesecurity.com/blog/introducing-trufflehog-v3

We're no longer maintaining v2 so I am closing this issue.