Skip to content

Artipacked

pipeleek gl container artipacked

Audit for artipacked misconfiguration (secrets in container images)

Synopsis

Scan for dangerous container build patterns that leak secrets like COPY . /path without .dockerignore

1
pipeleek gl container artipacked [flags]

Options

1
2
3
4
5
6
7
8
  -h, --help               help for artipacked
  -m, --member             Scan projects the user is member of
  -n, --namespace string   Namespace to scan
      --order-by string    Order projects by: id, name, path, created_at, updated_at, star_count, last_activity_at, or similarity (default "last_activity_at")
  -o, --owned              Scan user owned projects only
      --page int           Page number to start fetching projects from (default 1, fetch all pages) (default 1)
  -r, --repo string        Repository to scan (if not set, all repositories will be scanned)
  -s, --search string      Query string for searching projects

Options inherited from parent commands

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
      --color                   Enable colored log output (auto-disabled when using --logfile) (default true)
      --config string           Config file path. Example: ~/.config/pipeleek/pipeleek.yaml
      --http-timeout duration   HTTP request timeout, e.g. 30s or 2m (default: no timeout)
      --ignore-proxy            Ignore HTTP_PROXY environment variable
      --json                    Use JSON as log output format
      --log-level string        Set log level globally (debug, info, warn, error). Example: --log-level=warn
  -l, --logfile string          Log output to a file
      --proxy string            Proxy URL, e.g. http://127.0.0.1:8080 or socks5://127.0.0.1:1080 (takes precedence over HTTP_PROXY)
      --tls-verification        Enable TLS certificate verification (by default verification is skipped to support self-signed certificates)
  -t, --token string            GitLab API Token
  -u, --url string              GitLab instance URL
  -v, --verbose                 Enable debug logging (shortcut for --log-level=debug)

SEE ALSO