Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Keep detected secrets removed in upper layer #2194

Closed
knqyf263 opened this issue May 29, 2022 · 0 comments · Fixed by #2611
Closed

Keep detected secrets removed in upper layer #2194

knqyf263 opened this issue May 29, 2022 · 0 comments · Fixed by #2611
Assignees
@DmitriyLewen
Labels
kind/feature Categorizes issue or PR as related to a new feature. priority/backlog Higher priority than priority/awaiting-more-evidence. scan/secret Issues relating to secret scanning

Comments

@knqyf263
Copy link
Collaborator

Description

Trivy currently scans hard-coded secrets in each layer and ignores a secret if it is removed in the upper layer. It is essential for vulnerability scanning, but on the other hand, removed secrets should be kept in secret scanning.
@knqyf263 knqyf263 added kind/feature Categorizes issue or PR as related to a new feature. priority/backlog Higher priority than priority/awaiting-more-evidence. labels May 29, 2022
@knqyf263 knqyf263 added the scan/secret Issues relating to secret scanning label May 30, 2022
@DmitriyLewen DmitriyLewen mentioned this issue Jul 28, 2022
Merged
6 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@DmitriyLewen DmitriyLewen

Labels
kind/feature Categorizes issue or PR as related to a new feature. priority/backlog Higher priority than priority/awaiting-more-evidence. scan/secret Issues relating to secret scanning
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

feat(secret): detect secrets removed or overwritten in upper layer aquasecurity/trivy
2 participants
@knqyf263 @DmitriyLewen