From 368d8fe1e8aebd74be160fafcae1b441236fecae Mon Sep 17 00:00:00 2001 From: Nathan Leach Date: Tue, 16 Mar 2021 11:48:09 -0700 Subject: [PATCH] Update to reflect 9.4 OOTB query --- TruffleHogCxQL/README.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/TruffleHogCxQL/README.md b/TruffleHogCxQL/README.md index 3d90509..9c5022a 100644 --- a/TruffleHogCxQL/README.md +++ b/TruffleHogCxQL/README.md @@ -1,7 +1,11 @@ +# **NOTE** *TruffleHog queries will be native to CxSast v9.4. If you are running v9.4, the CxQL queries found here are no longer required.* + # TruffleHog CxQL A port of the original [TruffleHog](https://github.com/dxa4481/truffleHog) code that executes in Checkmarx SAST as a CxQL customization. + + # Warning The queries here will have a tendency to generate many false positives. Before implementing this, consider weighing the value of spending time marking several false positives as "Non-Exploitable" against perhaps finding a few true positives that reveal publicly exposed secrets. Some secrets will be benign; others will have the potential for granting administrative access to your production system.