Security●Mid
Keychase – A zero-config, offline Python secret scanner
Yet another secret scanner when TruffleHog and Gitleaks already dominate this space.
Cozy
Iflal
133mo ago
Back to browse
GitHub Repository
layerleak the Docker Hub Secret Scanner
39 starsGo
Layerleak – Like Trufflehog, but for Docker Hub
by brumbelow·Mar 26, 2026·10 points·8 comments
AI Analysis
●●SolidNiche GemBig Brain
Scans Docker Hub layers directly without Docker daemon—Trufflehog for containers.
Strengths
- •No Docker daemon dependency—parses OCI image internals directly from registry.
- •Deduplicates findings by manifest digest with first_seen/last_seen tracking.
- •Scans deleted-layer artifacts that traditional flat-blob scanners miss.
Weaknesses
- •Public Docker Hub only—no private registry or authenticated scan support yet.
- •No secret verification—findings include false positives from test/demo values.
Category
Target Audience
DevSecOps engineers, container security teams
Similar To
Trufflehog · Gitleaks · Docker Scout
Similar Projects
Infrastructure●Mid
UniFi OS Server in Docker
Extracts proprietary Ubiquiti installer for standard Docker Compose deployment.
Solve My Problem
AdriaanvRossum
3117d ago
Security●●Solid
Sambaudit, a secrets scanner for SMB shares with a web UI
Web UI triage workflow beats CLI-only tools like Snaffler for team collaboration.
Solve My ProblemNiche Gem
dwoosley
208d ago
Developer Tools●Mid
Atuin AI Proxy bridges Hub AI to an OpenAI-compatible endpoint
Atuin-specific AI proxy when you need Codex instead of OpenAI.
Niche Gem
Am1G0
3020d ago
Security●●Solid
MCP-scan – Security scanner for MCP server configs
First security scanner for MCP configs as the protocol gains adoption.
Niche GemShip It
AbanoubRodolf
104mo ago
Developer Tools●Mid
ComposeFlux – GitOps continuous deployment for Docker Compose
Yet another GitOps tool, but pure Go without shell execution is a nice touch.
Niche GemShip It
catfight7391
103mo ago