Docker Credentials
Description
General
- Documentation: https://docs.docker.com/docker-hub/api/latest/
- Summary: Docker is a set of platform as a service products that helps in delivering packages called containers. Among other things Docker provides a container image library called Docker Hub that acts as a registry to host images. This detector aims at catching access tokens that are used as password to programmatically interact with the service.
Revoke the secret
An access token can be revoked from the security tab in the Docker Hub UI.
Details for Docker Credentials
-
Family: credentials
-
Category: package_registry
-
Company: Docker
-
High recall: True
-
Validity check available: True
-
Analyzer available: True
-
Revoker available: False
-
On-premise instances exist: False
-
Only valid secrets raise an alert: False
-
Occurrences found for one million commits: 3.05
-
Prefixed: True
Secret Analyzer
Analysis Method
- Provider allows scopes enumeration: True
- Total network call count: 1
- Total call count may vary: False
HTTP Calls
Requests are designed to capture metadata and not to function effectively.
- POST:
/v2/auth/token
Other Calls
Non-HTTP queries or HTTP calls made through a third-party app (e.g., Python package). No other calls for this analyzer.
