# Installer tartufo avec Homebrew, Nix

Consultez les chemins d'installation, exécutables, métadonnées et notes de sécurité de tartufo pour les workflows d'agents IA.

## installation

```sh
sudo av install brew:tartufo
```

Commandes d'installation supplémentaires:

### macOS

- Homebrew (100%):

```sh
brew install tartufo
```

  Preuve: local Homebrew formula metadata

### Linux

- Nix (92%):

```sh
nix profile install nixpkgs#tartufo
```

  Preuve: nixpkgs package indexes: pkgs/by-name/ta/tartufo/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

## Faits du paquet

- **Clé du paquet:** brew:tartufo
- **Gestionnaire de paquets:** Homebrew
- **Version:** 6.0.0
- **Résumé source:** Searches through git repositories for high entropy strings and secrets
- **Page d'accueil:** <https://tartufo.readthedocs.io/en/stable/>
- **Dépôt:** <https://github.com/godaddy/tartufo>
- **Dernière mise à jour:** 2026-07-25T10:47:16Z
- **Généré:** 2026-08-03T19:37:03+00:00

## exécutables

- tartufo (alias)

## Comportement d'installation

- Bouteille: non disponible

## Version et fraîcheur

- page générée: 2026-08-03
- version du gestionnaire: 6.0.0
## Historique du projet et usages

tartufo is a Git secret-scanning CLI from GoDaddy. Its documentation describes scanning repository history and branches for likely secrets using regular expressions and entropy checks, with both local/remote repository scans and pre-commit use.

### Historique du projet

The official documentation says tartufo was inspired by and built from Dylan Ayrey's truffleHog project. The public changelog begins with v0.0.1 and v0.0.2 on 2019-10-23, followed by v1.0.x releases in November 2019.

The project was substantially reworked for the 2.x line: the changelog describes v2.0.0-era work as a documentation refresh and v2.0.0 alpha as a full restructuring, retesting, rebuilding, and remake that split functionality into subcommands such as pre-commit, scan-local-repo, and scan-remote-repo.

### Historique d'adoption

The source facts list tartufo in Homebrew and Nix, while the official quick start documents pip and Docker installation. That combination places it in the common security-tool path of Python package, container image, and package-manager install surfaces.

### Modes d'utilisation

The core CLI use is scanning Git repositories for secrets across history and branches. Official examples show scan-remote-repo, scan-local-repo, and Docker-based scans, and the README notes pre-commit usage for screening changes before commit.

Configuration is TOML-based. Official docs show settings under [tool.tartufo], exclusion signatures, include/exclude path patterns, and custom rule patterns.

### Pourquoi les passionnés de paquets s'y intéressent

Package maintainers care about tartufo because it operationalizes a common repository hygiene task: finding accidentally committed credentials before publishing or while auditing history. Its truffleHog lineage and pre-commit mode make it part of the broader CLI culture around secret scanning in development workflows.

### Chronologie

- 2019-10-23: v0.0.1 and v0.0.2 appear in the official project history.
- 2019-11-19: v1.0.0/v1.0.2 releases appear in the official project history.
- 2020-10-09: v2.0.0 documents a refreshed 2.0 usage model.
- 2021-02-04: v2.3.0 switches the primary development branch from master to main.
- 2022-01-05: v3.0.0 stable release.
- 2023-01-17: v4.0.0 drops deprecated flags and Python 3.6 support while adding Python 3.11 support.

### Related projects

- truffleHog is named by the official documentation as the project that inspired tartufo.
- BFG appears in tartufo's changelog as a referenced secret-cleanup tool.

### Sources

- <https://tartufo.readthedocs.io/en/stable/>
- <https://tartufo.readthedocs.io/en/stable/changelog.html>
- <https://tartufo.readthedocs.io/en/stable/configuration.html>
- source_facts.package-manager


## Notes de sécurité

Aucun manifest local de gestion des secrets correspondant n'a été trouvé pour tartufo. Les métadonnées de paquet Nucleus restent publiées ici afin que la couverture future dispose d'une URL stable.



## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Unix: tartufo.toml, pyproject.toml, files specified with --config
## Autres enregistrements de gestionnaires de paquets

- Nix - tartufo: normalized package name match | nixpkgs package indexes: pkgs/by-name/ta/tartufo/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1


## Combined YAML source

View the package source record on GitHub. [combined/tartufo.yml](https://github.com/mxcl/pkgdb/blob/main/combined/tartufo.yml)


## Sources

- pkg.so package database
- Geiger risk classifier
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph