trufflehog icon indicating copy to clipboard operation
trufflehog copied to clipboard

Find a different way to verify Dockerhub detector findings due to change from dockerhub

Open bugbaba opened this issue 9 months ago • 0 comments

Hi Team,

Just noticed that the hub.docker.com has changed the login mechanism and hence giving Incorrect authentication credentials even for valid credentials.

In the webapp the user is redirected to login.docker.com for authentication which has csrf protection mechanism The post request to https://hub.docker.com/v2/users/login isn't working causing both of these detectors to fail.

https://github.com/trufflesecurity/trufflehog/blob/main/pkg/detectors/dockerhub/v1/dockerhub.go https://github.com/trufflesecurity/trufflehog/blob/main/pkg/detectors/dockerhub/v2/dockerhub.go

-- Regards, @bugbaba

bugbaba avatar May 06 '24 07:05 bugbaba