CodeScoring.Secrets
General description
CodeScoring.Secrets is a module that searches for sensitive information in code (passwords, API keys, tokens), while using its own machine learning model to significantly reduce the number of false positives during scanning.
Secrets are searched using open analysis tools, currently the Gitleaks, TruffleHog and Kingfisher engines are used.
Installing the utilities
When scanning with the Johnny console agent, you must install the selected utility separately in the environment where the agent runs. These utilities are not included in the Johnny distribution. Links to installation and configuration instructions are provided in Preparing for scanning.
Was this page helpful?