Whispers - Identify Hardcoded Secrets In Static Structured Text

"My little birds are everywhere, even in the North, they whisper to me the strangest stories." - Lord Varys Whispers is a static code analysis tool designed for parsing various common data formats in search of hardcoded credentials and dangerous functions. Whispers can run in the CLI or you can...

GO-2021-0066 Sensitive information leak via log file in k8s.io/kubernetes

Attempting to read a malformed .dockercfg may cause secrets to be inappropriately logged...