trufflehog
trufflehog copied to clipboard
Find a different way to verify Dockerhub detector findings due to change from dockerhub
Hi Team,
Just noticed that the hub.docker.com has changed the login mechanism and hence giving Incorrect authentication credentials
even for valid credentials.
In the webapp the user is redirected to login.docker.com
for authentication which has csrf protection mechanism
The post request to https://hub.docker.com/v2/users/login
isn't working causing both of these detectors to fail.
https://github.com/trufflesecurity/trufflehog/blob/main/pkg/detectors/dockerhub/v1/dockerhub.go https://github.com/trufflesecurity/trufflehog/blob/main/pkg/detectors/dockerhub/v2/dockerhub.go
-- Regards, @bugbaba