feat(secret): enhance secret scanning for python binary files (#7223)

Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: knqyf263 <knqyf263@gmail.com>
This commit is contained in:
afdesk
2024-09-30 18:42:46 +06:00
committed by GitHub
parent 9d1be410c4
commit 60725f879b
6 changed files with 96 additions and 9 deletions

View File

@@ -3,7 +3,9 @@
Trivy scans any container image, filesystem and git repository to detect exposed secrets like passwords, api keys, and tokens.
Secret scanning is enabled by default.
Trivy will scan every plaintext file, according to builtin rules or configuration. There are plenty of builtin rules:
Trivy will scan every plaintext file, according to builtin rules or configuration. Also, Trivy can detect secrets in compiled Python files (`.pyc`).
There are plenty of builtin rules:
- AWS access key
- GCP service account