SecretScanner
SecretScanner copied to clipboard
deepfence
:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:
Container build tools have tar exporters, it would be helpful to support scanning of existing tarballs. ie a flag for `-tar-path` that skips the `saveImageData()` step (removing the need for...
pre-commit - A framework for managing and maintaining multi-language pre-commit hooks. https://pre-commit.com
tried to run a scan-Job: ```bash image: docker:latest services: - docker:dind variables: DOCKER_HOST: tcp://docker:2375 DOCKER_DRIVER: overlay2 DOCKER_TLS_CERTDIR: "" IMAGE_NAME: myownimage IMAGE_TAG: v1 secret-detection-image: stage: image-scan image: name: deepfenceio/deepfence_secret_scanner:2.1.0 entrypoint: [""]...
Found a vulnerability in the package.json file: [@docusaurus/[email protected]](https://nvd.nist.gov/vuln/detail/CVE-2023-45133)
Encountered an error while running the `deepfenceio/deepfence_secret_scanner:2.0.0` docker image. ``` flag provided but not defined: -output-path ``` Noticed that 2 related json output options were remove from an earlier PR...
output/output.go:9:2: github.com/deepfence/[email protected] (replaced by ./agent-plugins-grpc): reading agent-plugins-grpc/go.mod: open **/home/User/Desktop/Tools/SecretScanner/agent-plugins-grpc/go.mod:** no such file or directory
I want to do a filesystem scan (I'm mounting a subpath) and I would like to skip scanning all files, called, say `conf.yml` Is there a way to achieve this...
github.com/containerd/containerd CVE-2023-25153 github.com/docker/distribution GHSA-qq97-vm5h-rrhg golang.org/x/net CVE-2022-41723
passing a flag like, `-container-runtime` or `-cr` during runtime would reduce the overall time taken to scan images when underlying runtime is known to user.
