Sign me up Login

Details about package trufflehog

Name:	trufflehog
Uploader:	Mikhail Potemkin <potemkinmr@gmail.com> (Debian QA page)
Description:	trufflehog - Find, verify, and analyze leaked credentials (program)

Package uploads

Upload #1

Information

Version:	3.60.4-1
Uploaded:	2026-02-07 16:59
Source package:	trufflehog_3.60.4-1.dsc
Distribution:	unstable
Section:	golang
Priority:	optional
Homepage:	https://github.com/trufflesecurity/trufflehog
Vcs-Browser:	https://github.com/Mikhail-Potemkin/trufflehog
Vcs-Git:	https://github.com/Mikhail-Potemkin/trufflehog.git

Changelog

 trufflehog (3.60.4-1) unstable; urgency=medium
 .
   * Upstream release

QA information

–
Package uses debhelper-compat

Debhelper compatibility level 13

–

Newer upstream version available

Local:	3.60.4
Upstream:	3.93.1
Url:	https://github.com/trufflesecurity/trufflehog/archive/refs/tags/v3.93.1.tar.gz

–
Package is not native

Format: 3.0 (quilt)
–
The uploader is not in the package's "Maintainer" or "Uploaders" fields
User email

potemkinmr@gmail.com

"Maintainer" email

team+pkg-go@tracker.debian.org

"Uploaders" emails
–
Package has lintian errors
trufflehog
- E field-too-long
  - Static-Built-Using (8597 chars > 5000)
- W no-manual-page
  - [usr/bin/generate]
  - [usr/bin/snifftest]
  - [usr/bin/trufflehog]
- W unknown-field
  - Static-Built-Using
- I arch-dep-package-has-big-usr-share
  - 8334kB 5%
- I package-contains-documentation-outside-usr-share-doc
  - [usr/share/gocode/src/github.com/trufflesecurity/trufflehog/pkg/detectors/badlist.txt]
  - [usr/share/gocode/src/github.com/trufflesecurity/trufflehog/pkg/detectors/privatekey/list.txt]
  - [usr/share/gocode/src/github.com/trufflesecurity/trufflehog/pkg/detectors/programmingbooks.txt]
  - [usr/share/gocode/src/github.com/trufflesecurity/trufflehog/pkg/detectors/words.txt]
  - [usr/share/gocode/src/github.com/trufflesecurity/trufflehog/pkg/engine/testdata/secrets.txt]
- I spelling-error-in-binary
  - befor before [usr/bin/snifftest]
  - befor before [usr/bin/trufflehog]
  - compatability compatibility [usr/bin/snifftest]
  - compatability compatibility [usr/bin/trufflehog]
  - convertion conversion [usr/bin/snifftest]
  - convertion conversion [usr/bin/trufflehog]
  - hexidecimal hexadecimal [usr/bin/snifftest]
  - hexidecimal hexadecimal [usr/bin/trufflehog]
  - ment meant [usr/bin/snifftest]
  - ment meant [usr/bin/trufflehog]
  - nAm name [usr/bin/snifftest]
  - nAm name [usr/bin/trufflehog]
  - occured occurred [usr/bin/snifftest]
  - occured occurred [usr/bin/trufflehog]
  - octects octets [usr/bin/snifftest]
  - octects octets [usr/bin/trufflehog]
  - ofthe of the [usr/bin/snifftest]
  - ofthe of the [usr/bin/trufflehog]
  - retreive retrieve [usr/bin/trufflehog]
  - targetted targeted [usr/bin/trufflehog]
  - tigger trigger [usr/bin/snifftest]
  - tigger trigger [usr/bin/trufflehog]
  - tranlation translation [usr/bin/snifftest]
  - tranlation translation [usr/bin/trufflehog]
  - userA users [usr/bin/snifftest]
  - userA users [usr/bin/trufflehog]
  - wasn was [usr/bin/snifftest]
  - wasn was [usr/bin/trufflehog]
  - withthe with the [usr/bin/snifftest]
  - withthe with the [usr/bin/trufflehog]
  - wtH with [usr/bin/snifftest]
  - wtH with [usr/bin/trufflehog]
trufflehog source
- W missing-license-paragraph-in-dep5-copyright
  - gnu affero general public license v3.0 [debian/copyright:12]
- W source-contains-prebuilt-windows-binary
  - [pkg/decoders/utf16_test.dll]
- W space-in-std-shortname-in-dep5-copyright
  - gnu affero general public license v3.0 [debian/copyright:12]
  - gnu affero general public license v3.0 [debian/copyright:8]
- I installable-field-mirrors-source
  - (in section for trufflehog) Section [debian/control:92]
- I missing-built-using-field-for-golang-package
  - (in section for trufflehog) [debian/control:91]
- I out-of-date-standards-version
  - 4.7.0 (released 2024-04-07) (current is 4.7.3)
- I patch-not-forwarded-upstream
  - [debian/patches/0001-main-fixes-before-success-build.patch]
- I unused-license-paragraph-in-dep5-copyright
  - agpl-3 [debian/copyright:18]
- P package-does-not-install-examples
  - [examples/]
- P trailing-whitespace
  - [debian/control:100]
  - [debian/control:101]
  - [debian/control:102]
  - [debian/control:99]
- X debian-watch-does-not-check-openpgp-signature
  - [debian/watch]
- X prefer-uscan-symlink
  - filenamemangle s%(?:.*?)?v?(\d[\d.]*)\.tar\.gz%@PACKAGE@-$1.tar.gz% [debian/watch:4]
- X very-long-line-length-in-source-file
  - 1478 > 512 [pkg/gitparse/gitparse_test.go:1668]
  - 15051 > 512 [.git/objects/pack/pack-e543e0fa893baf4d9ab8dd7f34ce6617aee60933.pack:109500]
  - 2654 > 512 [pkg/handlers/testdata/test.deb:2338]
  - 2761 > 512 [.git/objects/pack/pack-e543e0fa893baf4d9ab8dd7f34ce6617aee60933.rev:547]
  - 3763 > 512 [.git/objects/pack/pack-e543e0fa893baf4d9ab8dd7f34ce6617aee60933.idx:3058]
  - 4581 > 512 [.git/index:138]
  - 4812 > 512 [pkg/handlers/testdata/test.rpm:1]
  - 514 > 512 [pkg/detectors/oopspam/oopspam.go:50]
  - 643 > 512 [pkg/detectors/salescookie/salescookie.go:50]
  - 660 > 512 [README.md:114]
–
Package is not in Debian
–
d/copyright is in DEP5 format

Upstream Contact: https://github.com/trufflesecurity/trufflehog

Licenses: GNU Affero General Public License v3.0

Comments

Split package:

Package: trufflehog
Section: golang
Architecture: any
Depends: trufflehog-common (= ${source:Version})
         git,
         ${misc:Depends},
         ${shlibs:Depends},
Static-Built-Using: ${misc:Static-Built-Using}
Description: Find, verify, and analyze leaked credentials
...

Package: trufflehog-common
Section: golang
Architecture: all
Description: Find, verify, and analyze leaked credentials (common files)



Fix lintian warnings first.

debian/source/options:
+tar-ignore='.git*'

Needs work Ermakov Alexander at Feb. 10, 2026, 2:29 a.m.

Not build:

Error: Unable to locate package archiver
Error: Unable to locate package bitfinex-api-go
Error: Unable to locate package bubblezone
Error: Unable to locate package depaware
Error: Unable to locate package go-server-sdk
Error: Unable to locate package golang-github-azure-azure-sdk-for-go-sdk-dev
Error: Unable to locate package golang-github-bobusumisu-aho-corasick-dev
Error: Unable to locate package golang-github-bradleyfalzon-ghinstallation-dev
Error: Unable to locate package golang-github-couchbase-gocb-dev
Error: Unable to locate package golang-github-marusama-semaphore-dev
Error: Unable to locate package golang-github-redis-go-redis-dev
Error: Unable to locate package golang-github-thezeroslave-zapsentry-dev
Error: Unable to locate package golang-github-trufflesecurity-disk-buffer-reader-dev
Error: Unable to locate package golang-gopkg-mcuadros-go-syslog.v2-dev
Error: Couldn't find any package by glob 'golang-gopkg-mcuadros-go-syslog.v2-dev'
Error: Unable to locate package gosnowflake
Error: Unable to locate package overseer
Error: Unable to locate package protoc-gen-validate
Error: Unable to locate package rfc5424

Ermakov Alexander at Feb. 10, 2026, 2:34 a.m.

What should be in trufflehog-common?
Sources of build-depends?
Could you please tell me which specific directories/files you suggest moving to trufflehog-common?

Ready Mikhail Potemkin at Feb. 12, 2026, 5:02 p.m.

Upstream Contact:	https://github.com/trufflesecurity/trufflehog
Licenses:	GNU Affero General Public License v3.0