You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I recently tried out https://github.com/praetorian-inc/noseyparker as a credential scanner and noticed that it found vastly different passwords compared to kics.
The main reason for this is that kics only scans "devops-y"-files like hcl, terraform, yaml files.
noseyparker scans all files (even blobs in .git) and thus finds many more secrets.
As a comparison I scanned one repo (can provide details internally):
kics found 31 secrets in yaml files
noseyparker found 14 other totally different secrets in .env-files, .git-files, php-files and .htpasswd files
I propose to support more than one scanner to find even more secrets.
Description
I recently tried out https://github.com/praetorian-inc/noseyparker as a credential scanner and noticed that it found vastly different passwords compared to kics.
The main reason for this is that kics only scans "devops-y"-files like hcl, terraform, yaml files.
noseyparker scans all files (even blobs in
.git
) and thus finds many more secrets.As a comparison I scanned one repo (can provide details internally):
I propose to support more than one scanner to find even more secrets.
Additional information
The text was updated successfully, but these errors were encountered: