FRESH FROM THE DOCKS: UNCOVERING 100,000 VALID SECRETS IN DOCKERHUB

Summary from the TLDR InfoSec newsletter

GitGuardian's analysis of 15 million DockerHub images revealed 100,000 valid secrets exposing databases, AWS infrastructures, GitHub Enterprise instances, and Artifactory repositories. 97% were found in image layers, with 60% created before 2024 and over 2,000 dating back to 2020, showing secrets often go unrotated for years. Docker images leak secrets due to build issues like persistent layers and build argument leaks, making regular security audits essential, as prevention is cheaper than responding to breaches.