trufflehog icon indicating copy to clipboard operation
trufflehog copied to clipboard

Docker Source Config fails

Open sherlocksecurity opened this issue 2 years ago • 5 comments

When i try to use custom config for docker, getting parse error ..

Command: trufflehog docker --image linuxbsdfreak/cpol-amd64 --only-verified --debug --config=config.yaml

Config file:

sources:
- connection:
    '@type': type.googleapis.com/sources.Docker
    basicAuth:
      password: dckr_pat_sfsfdsafas
      username: testes
    images:
    - trufflesecurity/secrets
  name: Docker
  scanPeriod: 12h
  type: SOURCE_TYPE_DOCKER
  verify: true

sherlocksecurity avatar Mar 20 '24 10:03 sherlocksecurity

Error:

2024/03/20 15:56:32 [updater child#1] start program 2024-03-20T15:56:32+05:30 info-2 trufflehog trufflehog 3.70.2 2024-03-20T15:56:32+05:30 error trufflehog error parsing the provided configuration file {"error": "proto: (line 1:2): unknown field "sources""} 2024/03/20 15:56:32 [updater parent] prog exited with 1

sherlocksecurity avatar Mar 20 '24 10:03 sherlocksecurity

I'm getting this too with a variation of the filesystem config documented as the following here:

sources:
- connection:
    '@type': type.googleapis.com/sources.Filesystem
    paths:
    - /home/me/dev
    excludePathsFile: /home/me/dev/exclude.txt
    includePathsFile: /home/me/dev/include.txt
  name: Filesystem
  scanPeriod: 12h
  type: SOURCE_TYPE_FILESYSTEM
  verify: true

gives me

{"level":"error","ts":"2024-05-24T13:01:36-07:00","logger":"trufflehog","msg":"error parsing the provided configuration file","error":"proto: (line 1:2): unknown field \"sources\""}

daveoconnor avatar May 24 '24 20:05 daveoconnor