The credentials in the PostgreSQL connection string are not being recognized.

[makuartur]

TruffleHog Version

3.90.12

Trace Output

https://gist.github.com/makuartur/789878b3516319e71983789d62a364ad

Expected Behavior

A PostgreSQL password should be detected in the connection string.

Actual Behavior

The secret was ignored and not detected.

Steps to Reproduce

mkdir trufflehog_postgres;
cd trufflehog_postgres;
cat << EOF > ./secrets.txt
#fake keys
[default]
aws_access_key_id = AKIAQYLPMN5HHHFPZAM2
aws_secret_access_key = 1tUm636uS1yOEcfP5pvfqJ/ml36mF7AkyHsEU0IU
postgres://test:test@127.0.0.1
postgresql://test:test@127.0.0.1
postgres://test:test@127.0.0.1:7432/test
postgresql://test:test@127.0.0.1:7432/test
EOF
trufflehog filesystem ./ --results=verified,unverified --log-level=5;

Environment

• OS: macOS
• Version 15.7.1

Additional Context

References

[vm-mscs-mmxxiv]

In my case trufflehog sniffed these secrets as unverified, but ...

1. the secrets that supposedly needed to fail were in unverified findings.
2. If --fail flag is added the unverified secrets will make trufflehog exit with 183
3. if user need to react on failure he can check exit code of last command echo $?

[makuartur]

I don't know what else to add — in my case, only the AWS secret is detected; the others are not recognized:

➜  trufflehog_postgres cat secrets.txt
#fake keys
[default]
aws_access_key_id = AKIAQYLPMN5HHHFPZAM2
aws_secret_access_key = 1tUm636uS1yOEcfP5pvfqJ/ml36mF7AkyHsEU0IU
postgres://test:test@127.0.0.1
postgresql://test:test@127.0.0.1
postgres://test:test@127.0.0.1:7432/test
postgresql://test:test@127.0.0.1:7432/test
➜  trufflehog_postgres trufflehog filesystem ./ --log-level=5;
2025-11-04T15:53:22+01:00	info-2	trufflehog	trufflehog 3.90.12
🐷🔑🐷  TruffleHog. Unearth your secrets. 🐷🔑🐷

2025-11-04T15:53:22+01:00	info-4	trufflehog	default engine options set
2025-11-04T15:53:22+01:00	info-4	trufflehog	engine initialized
2025-11-04T15:53:22+01:00	info-4	trufflehog	setting up aho-corasick core
2025-11-04T15:53:22+01:00	info-4	trufflehog	set up aho-corasick core
2025-11-04T15:53:22+01:00	info-2	trufflehog	starting scanner workers	{"count": 8}
2025-11-04T15:53:22+01:00	info-2	trufflehog	starting detector workers	{"count": 64}
2025-11-04T15:53:22+01:00	info-2	trufflehog	starting verificationOverlap workers	{"count": 8}
2025-11-04T15:53:22+01:00	info-2	trufflehog	starting notifier workers	{"count": 8}
2025-11-04T15:53:22+01:00	info-0	trufflehog	running source	{"source_manager_worker_id": "4xLtR", "with_units": true}
2025-11-04T15:53:22+01:00	info-2	trufflehog	enumerating source	{"source_manager_worker_id": "4xLtR"}
2025-11-04T15:53:22+01:00	info-3	trufflehog	chunking unit	{"source_manager_worker_id": "4xLtR", "unit_kind": "unit", "unit": "./"}
2025-11-04T15:53:22+01:00	info-3	trufflehog	scanning file	{"source_manager_worker_id": "4xLtR", "unit_kind": "unit", "unit": "./", "path": "secrets.txt"}
2025-11-04T15:53:22+01:00	info-5	trufflehog	dataErrChan closed, all chunks processed	{"source_manager_worker_id": "4xLtR", "unit_kind": "unit", "unit": "./", "path": "secrets.txt", "mime": "text/plain; charset=utf-8", "timeout": 60}
2025-11-04T15:53:22+01:00	info-4	trufflehog	finished scanning chunks	{"scanner_worker_id": "gWknW"}
2025-11-04T15:53:22+01:00	info-4	trufflehog	finished scanning chunks	{"scanner_worker_id": "959Zh"}
2025-11-04T15:53:22+01:00	info-4	trufflehog	finished scanning chunks	{"scanner_worker_id": "9pZ3i"}
2025-11-04T15:53:22+01:00	info-4	trufflehog	finished scanning chunks	{"scanner_worker_id": "7R93z"}
2025-11-04T15:53:22+01:00	info-4	trufflehog	finished scanning chunks	{"scanner_worker_id": "4KDju"}
2025-11-04T15:53:22+01:00	info-4	trufflehog	finished scanning chunks	{"scanner_worker_id": "48Vs6"}
2025-11-04T15:53:22+01:00	info-4	trufflehog	finished scanning chunks	{"scanner_worker_id": "f6dvK"}
2025-11-04T15:53:22+01:00	info-4	trufflehog	finished scanning chunks	{"scanner_worker_id": "4TDrc"}
2025-11-04T15:53:22+01:00	info-5	trufflehog	Starting to detect chunk	{"detector_worker_id": "YvwyJ", "detector": {"type":"AWS"}, "decoder_type": "PLAIN", "chunk_source_name": "trufflehog - filesystem", "chunk_source_id": 1, "chunk_source_metadata": "filesystem:{file:\"secrets.txt\"}"}
2025-11-04T15:53:23+01:00	info-4	trufflehog	link is empty, skipping update	{"detector_worker_id": "YvwyJ", "detector": {"type":"AWS"}, "decoder_type": "PLAIN", "chunk_source_name": "trufflehog - filesystem", "chunk_source_id": 1, "chunk_source_metadata": "filesystem:{file:\"secrets.txt\"}", "timeout": 10}
2025-11-04T15:53:23+01:00	info-5	trufflehog	Finished detecting chunk	{"detector_worker_id": "YvwyJ", "detector": {"type":"AWS"}, "decoder_type": "PLAIN", "chunk_source_name": "trufflehog - filesystem", "chunk_source_id": 1, "chunk_source_metadata": "filesystem:{file:\"secrets.txt\"}"}
✅ Found verified result 🐷🔑
Detector Type: AWS
Decoder Type: PLAIN
Raw result: AKIAQYLPMN5HHHFPZAM2
Arn: arn:aws:iam::052310077262:user/canarytokens.com@@c20nnjzlioibnaxvt392i9ope
Resource_type: Access key
Account: 052310077262
Message: This is an AWS canary token generated at canarytokens.org.
Is_canary: true
File: secrets.txt
Line: 3

2025-11-04T15:53:23+01:00	info-0	trufflehog	finished scanning	{"chunks": 1, "bytes": 275, "verified_secrets": 1, "unverified_secrets": 0, "scan_duration": "679.904209ms", "trufflehog_version": "3.90.12", "verification_caching": {"Hits":0,"Misses":1,"HitsWasted":0,"AttemptsSaved":0,"VerificationTimeSpentMS":676}}
➜  trufflehog_postgres trufflehog --version
trufflehog 3.90.12
➜  trufflehog_postgres trufflehog filesystem ./ --log-level=5;

[vm-mscs-mmxxiv]

What if change test to something mock and more looking like a real thing in this lines

postgres://test:test@127.0.0.1
postgresql://test:test@127.0.0.1
postgres://test:test@127.0.0.1:7432/test
postgresql://test:test@127.0.0.1:7432/test

in secrets.txt?