aquasecurity/trivy

feat: add flag to pass credentials to different Git hosting platforms

Open

#6,833 建立於 2024年5月31日

在 GitHub 查看
 (1 留言) (6 反應) (0 負責人)Go (371 fork)batch import
help wantedkind/featuretarget/repository

倉庫指標

Star
 (35,000 star)
PR 合併指標
 (平均合併 5天 2小時) (30 天內合併 53 個 PR)

描述

Discussed in https://github.com/aquasecurity/trivy/discussions/6832

Originally posted by psg18dhc May 31, 2024

Description

I noticed that when using BitBucket private repositories it's not possible to scan my code repo as i get auth errors.

GITHUB_TOKEN and GITLAB_TOKEN env vars do not work (because it's not a GitHub repo)

Is there a way to do this securely without having to make the repo public ?

i.e can we have a BITBUCKET_TOKEN env var specifically for this purpose ?

Regards Daniel C

Target

Git Repository

Scanner

None

貢獻者指南