This is interesting to me because it's both a high-profile violation of AGPL, and because it's (for better or for worse) a high-profile usage of Mastodon in the wild.
Mastodon's original developer sent a cease and desist letter to Gab on October 21 for not publishing the version of their codebase that is currently in production.[1] Gab updated their repo in one hour, and later shared the entire code tree instead of just a password protected archive file.[2]
It's really not that difficult to comply with AGPLv3. Truth Social should simply release the code and keep the repo up to date.