{"version":"1.0","workflow_uuid":"874d55f8-372b-11f1-9bc6-00163e2b0d79","workflow_title":"TruffleHog — Find and Verify Leaked Credentials","install_contract":{"version":"1.0","installReady":false,"title":"TruffleHog — Find and Verify Leaked Credentials","summary":"TruffleHog finds, verifies, and analyzes leaked credentials across Git repos, filesystems, S3 buckets, and more. Unlike basic secret scanners, TruffleHog checks if detected credentials are actually active — reducing false positives dramatically.","assetType":"Scripts","pageUrl":"https://tokrepo.com/en/workflows/874d55f8-372b-11f1-9bc6-00163e2b0d79","sourceUrl":"https://github.com/example/repo.git","intendedFor":[],"firstActions":[],"agentFirstSteps":[],"targetPaths":[],"verification":[],"startingPoints":[],"example":"","successOutcome":"","boundaries":[],"askUserIf":["the current workspace stack cannot be matched to a safe upstream template","the target path is not the project root, or an existing file should be merged instead of overwritten"]}}