Gartner®: Avoid Mobile Application Security Pitfalls

Keep secrets out of Docker images

GitGuardian scans your Docker images for secrets and sensitive data. Find hardcoded API keys, database credentials, private keys, and a lot more in your Docker images before publishing them to public or private artifact registries.

Scan Dockerfile, build args and Docker image layers’ filesystem
Integrate with your CI/CD pipelines
Find %ndet%+ types of secrets and sensitive files

Start Scanning Now

Start scanning docker
from your CLI in 3 steps

Get your GitGuardian API key

Install ggshield CLI

Follow the steps in the documentation
to install ggshield on your machine.

Scan a Docker image

Hooray 🎉 You can now scan your first Docker image
for hardcoded secrets. Run ggshield scan docker <IMAGE_NAME>.

Start scanning your first Docker image

Trusted by Application Security, loved by developers

Each month more than 10K developers protect their code using GitGuardian and join the community.

Dovine Owuor K.

DoveOwuor

@GitGuardian I appreciate your security enhancement on my repositories. This is a greater solution to security and I believe if you try it you will actually be impressed. Gracias

06/09/2022

iben

iben12

I accidentally pushed a valid Slack Webhook URL into a github repository. In 5 minutes I got email from Slack and GitGuardian to warn me about the incident. That's great! 👏

12/31/2021

Clint Gibler

clintgibler

👀 Finding secrets in Docker containers @GitGuardian scanned ~2K public containers, and found secrets in ~7% Pro tip: Use the Docker manifest file to focus on layers where either files are manually added or copied, or environment variables are modified

11/08/2021

Laurent Destailleur

eldy10

@GitGuardian Thanks for your help in keeping @dolibarr and @dolicloud safer.

05/26/2021

Tyler Smith

tcrypt25519

I'd never heard of @GitGuardian until last night when I accidentally pushed an unsealed Ansible vault to Github, and they notified me within minutes so I could rotate the secrets before it was exploited. Definitely an effective way to advertise your services.

11/11/2020

Go further

Vue ATTR

Want to see more of GitGuardian?

Connect with our product experts
and get a 1:1 demo

Thank you! Your submission has been received!

Oops! Something went wrong while submitting the form.

Keep secrets out of Docker images