ended3월 26일· 1 sources

Layerleak Exposes Hardcoded Secrets in Public Docker Images

Layerleak, Docker Hub 공개 이미지의 숨겨진 자격증명 적발

Why it matters

Layerleak fills a critical security gap by scanning publicly available Docker Hub images for exposed credentials that traditional secret detection tools often miss. Unlike generic scanners, it understands Docker/OCI internals and analyzes image layers, deleted artifacts, and metadata to uncover hardcoded secrets. This matters because developers frequently publish images with embedded credentials, creating supply chain vulnerabilities that impact all downstream users of those images.

1
Sources
+0
24h
Growth
179d
Active
LayerleakDocker Hubsecret scannerOCI imagecontainer security

Sources

Related Issues