Skip to content

Snowflake detector: poor password matches #3833

Open
@rgmz

Description

Please review the Community Note before submitting

TruffleHog Version

3.88.1

Observed Behaviour

The Snowflake detector does a bad job at matching passwords, resulting in incorrect matches and missed detections.

app.py

def create_snowflake_connection():
    return snowflake.connector.connect(
    account="company-sf_preprod.privatelink",
    user="AN234554AD",
    password="Hello@12345",
    role="POC_CONTAINER_ROLE",
    warehouse="POC_WH",
    database="POC_DB",
    schema="DATA_SCHEMA"
    )

Output

🐷🔑🐷  TruffleHog. Unearth your secrets. 🐷🔑🐷

2025-01-08T14:57:03-05:00	info-0	trufflehog	running source	{"source_manager_worker_id": "79OS0", "with_units": true}
Found unverified result 🐷🔑❓
Verification issue: lookup company-sf_preprod.privatelink.snowflakecomputing.com: no such host
Detector Type: Snowflake
Decoder Type: PLAIN
Raw result: Hello@12345",
Account: company-sf_preprod.privatelink
Username: AN234554AD
Line: 5

Expected Behaviour

Trailing quotes and commas should not be matched.

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions