Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Enhancement] Support other scanners or use multiple #14

Open
rndmh3ro opened this issue Mar 3, 2023 · 0 comments
Open

[Enhancement] Support other scanners or use multiple #14

rndmh3ro opened this issue Mar 3, 2023 · 0 comments
Labels
enhancement New feature or request

Comments

@rndmh3ro
Copy link
Collaborator

rndmh3ro commented Mar 3, 2023

Description

I recently tried out https://github.com/praetorian-inc/noseyparker as a credential scanner and noticed that it found vastly different passwords compared to kics.
The main reason for this is that kics only scans "devops-y"-files like hcl, terraform, yaml files.

noseyparker scans all files (even blobs in .git) and thus finds many more secrets.

As a comparison I scanned one repo (can provide details internally):

  • kics found 31 secrets in yaml files
  • noseyparker found 14 other totally different secrets in .env-files, .git-files, php-files and .htpasswd files

I propose to support more than one scanner to find even more secrets.

Additional information

@rndmh3ro rndmh3ro added the enhancement New feature or request label Mar 3, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant