Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Find a different way to verify Dockerhub detector findings due to change from dockerhub #2787

Open
bugbaba opened this issue May 6, 2024 · 0 comments
Labels

Comments

@bugbaba
Copy link

bugbaba commented May 6, 2024

Hi Team,

Just noticed that the hub.docker.com has changed the login mechanism and hence giving Incorrect authentication credentials even for valid credentials.

In the webapp the user is redirected to login.docker.com for authentication which has csrf protection mechanism
The post request to https://hub.docker.com/v2/users/login isn't working causing both of these detectors to fail.

https://github.com/trufflesecurity/trufflehog/blob/main/pkg/detectors/dockerhub/v1/dockerhub.go
https://github.com/trufflesecurity/trufflehog/blob/main/pkg/detectors/dockerhub/v2/dockerhub.go

--
Regards,
@bugbaba

@bugbaba bugbaba added the bug label May 6, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Development

No branches or pull requests

1 participant