GitLeaks

GitLeaks GitLab CI コンポーネント Gitleaks 用の GitLab CI コンポーネント - パスワード、API キー、トークンといったハードコードされた秘密情報を git リポジトリで検出・防止する SAST ツールです。 機能 シークレット検出 : リポジトリをスキャンし、ハードコードされた秘密情報や機密情報を検出します。 包括的なルール : さまざまな種類の秘密情報を検出するための豊富なビルトインルール カスタム設定 : ローカルおよびリモート設定ファイルのサポート 複数の出力形式 : JSON、SARIF、その他のレポート形式をサポート 柔軟な引数 :...

GitLeaks

GitLeaks 컨테이너 이미지 로컬 워크플로 및 파이프라인에서 비밀 스캐닝을 위한 맞춤형 gitleaks 빌드입니다. 기능 재현 가능한 바이너리를 위해 고정된 Go 툴체인과 함께 태그된 업스트림 소스에서 gitleaks를 빌드합니다. niclas-zone/ci/gitleaks의 GitLab CI 컴포넌트. 사용법 이미지 가져오기 root@kitploit: podman pull registry.gitlab.com/niclas-zone/ctr/gitleaks:latest 스캔 실행 root@kitploit: podman run...

gitleaks

Gitleaks ┌─○───┐ │ │╲ │ │ │ ○ │ │ ○ ░ │ └─░───┘ root@kitploit: !WARNING Gitleaks завершён по функциональности. Я не добавляю новые функции в Gitleaks. Будущие релизы будут только с исправлениями безопасности. Я переключаю своё внимание на Betterleaks license:...

gitbleed_tools

GitBleed Tools - for extracting data from mirrorred git repositories About This repo contains shell scripts that can be used to download and analyze differences between cloned and mirror Git repositories. For more information about the underlying quirk in Git behavior, please visit read our blog...

gitbleed_tools

GitBleed 도구 - 미러링된 Git 저장소에서 데이터 추출 소개 이 저장소는 클론된 저장소와 미러 저장소 간의 차이를 다운로드하고 분석하는 데 사용할 수 있는 셸 스크립트를 포함합니다. Git 동작의 기본적인 특성에 대한 자세한 내용은 블로그 게시물을 방문해 주세요. 이 스크립트들은 무엇을 하나요? 이 스크립트들은 주어진 Git 저장소를 일반 클론과 미러"--mirror" 옵션 두 가지 방식으로 복제합니다. 그런 다음 두 복제본 간의 델타를 생성하여 미러 모드에서만 사용할 수 있는 저장소 부분을 찾습니다. 마지막으로...

git-secrets-scan

Bitbucket Security: Secret Scanner Scans your files for hardcoded secrets, keys, and passwords. Creates a security Code Insights report if found. This Bitbucket Cloud supported Pipe leverages the gitleaks secret pattern registry to provide industry-leading Security Secrets Scanning capabilities t...

ssh-audit

ssh-audit...

pillager

Pillager Pillage filesystems for sensitive information with Go. Table of Contents 1. Summary 2. Installation 3. Usage 4. Exfiltration 5. Documentation Summary Pillager is designed to provide a simple means of leveraging Go's strong concurrency model to recursively search directories for sensitive...

GO-2021-0113 vulnerabilities

Vulnerabilities for packages: hey, vt-cli, gitleaks, terraform-provider-sendgrid, k3d, terraform-provider-sendgrid-fips, dynamic-localpv-provisioner, dynamic-localpv-provisioner-fips...

GO-2022-1059 vulnerabilities

Vulnerabilities for packages: grpcurl, kubeflow, hey, vt-cli, kubeflow-fips, gitleaks, terraform-provider-sendgrid, k3d, php-fpmexporter, terraform-provider-sendgrid-fips, kube-state-metrics, dynamic-localpv-provisioner, dynamic-localpv-provisioner-fips...

GO-2025-4020 vulnerabilities

Vulnerabilities for packages: mattermost-fips, gotenberg, syft-fips, wolfictl, grype-fips, gptscript, trufflehog, undock, filebrowser, zarf, chainctl, nuclei, kots, kubescape, trufflehog-fips, grype, grype-db, cg, k9s-fips, gitleaks, k9s, chezmoi, mattermost, syft...

GO-2025-3922 vulnerabilities

Vulnerabilities for packages: podman, vcluster, trivy, gitness, trufflehog, zarf, undock, gptscript, grafana-alloy, nsc, guac, steampipe, nuclei, tflint, trivy-operator, gitleaks, filebrowser, terragrunt, rancher-fleet, envoy-gateway, kubescape-operator, opentofu, xeol, zot, terraform, k9s...

GO-2021-0113 vulnerabilities

Vulnerabilities for packages: k3d, vt-cli, terraform-provider-sendgrid, dynamic-localpv-provisioner, gitleaks, hey...

GO-2022-1059 vulnerabilities

Vulnerabilities for packages: k3d, vt-cli, terraform-provider-sendgrid, kubeflow, dynamic-localpv-provisioner, php-fpmexporter, gitleaks, grpcurl, hey...

GO-2025-4020 vulnerabilities

Vulnerabilities for packages: zarf, undock, gptscript, nuclei, kots, grype, gitleaks, filebrowser, wolfictl, kubescape, k9s, chezmoi, trufflehog, syft...

CVE-2026-63728

A flaw was found in Gitleaks. This template injection vulnerability allows an attacker who can influence report templates to read arbitrary environment variables. By leveraging non-hermetic Sprig template functions, attackers can craft malicious report templates to extract sensitive data such as...

CVE-2026-63728

Gitleaks prior to 8.30.1 contains a template injection vulnerability that allows attackers who can supply or influence report templates to read arbitrary environment variables and exfiltrate sensitive data by leveraging non-hermetic Sprig template functions. Attackers can craft malicious report...

CVE-2026-63728

Gitleaks before version 8.30.1 is affected by a template injection vulnerability in the report template feature. Attackers who can supply or influence report templates can leverage non-hermetic Sprig template functions (env, expandenv, getHostByName) to read arbitrary environment variables and ex...

CVE-2026-63728 Gitleaks Secret Exfiltration via Non-Hermetic Sprig Template Functions in Report Template Feature

Gitleaks prior to 8.30.1 contains a template injection vulnerability that allows attackers who can supply or influence report templates to read arbitrary environment variables and exfiltrate sensitive data by leveraging non-hermetic Sprig template functions. Attackers can craft malicious report...

CVE-2026-63728 Gitleaks Secret Exfiltration via Non-Hermetic Sprig Template Functions in Report Template Feature

Gitleaks prior to 8.30.1 contains a template injection vulnerability that allows attackers who can supply or influence report templates to read arbitrary environment variables and exfiltrate sensitive data by leveraging non-hermetic Sprig template functions. Attackers can craft malicious report...