Did you know that you can use ggshield to
scan docker images for secrets? Docker is an extremely popular container platform,
with millions of developers creating many millions of images each year. An image is a template file that contains
instructions for creating a Docker container. A lot of those images get shared through places
like Dockerhub. And sometimes, images get shared unexpectedly
such as when you have a code leak. Just like with any other code, developers
often need to add authentication to various services or data sources into their setup. This brings a risk of adding credentials in
plaintext, which, while convenient, also makes you vulnerable to attacks. We built the

ggshield secret scan docker

command to help. ggshield is the command line interface for
GitGuardin, extending the full secret scanning power of the platform to the developer's terminal. With one simple command, anyone on your team
can quickly detect any hardcoded credentials inside a docker image. Simply type ggshield secret scan docker and
include the path to scan, and GitGuardian will scan each layer of that image, alerting
you to any secrets detected. You can run this before ever committing your
image to your git history, keeping your repos clean. You can also use ggshield inside of the CI
process, such as with GitHub Actions to automatically scan for secrets during the build process If the image isn't already present, ggshield
will try to pull the image to run the scan, just as we do with Pypi packages. Docker is a powerful way to build and scale
applications. Use ggshield to make sure you are safely sharing
your templates and not your secrets.

‍