-
Feature Request
-
Resolution: Unresolved
-
Undefined
-
None
-
None
-
None
-
Product / Portfolio Work
-
None
-
False
-
None
-
None
-
None
-
-
-
-
-
-
None
-
None
- Proposed title of this feature request-Scan for secrets being introduced during the docker image build process, which might be visible in the Dockerhub "image layers" tab.
2. What is the nature and description of the request? Customer ran into a scenario where they accidentally uploaded a secret to a public docker repo in their dockerfile and would like the ability to scan a Dockerfile for a hardcoded secret. They would also like the ability to scan a configmap for a hard coded secret. Sometime, the secrets are not in Dockerfile, but might be introduced by the Dockerfile instructions, and caused the secrets to be stored in Dockerhub "Image Layer" Tab
3. Why does the customer need this? (List the business requirements here) Secure secrets
4. List any affected packages or components.5. Priority-- Low