3 ms·

That's true, but as you can see from your paste, Trufflehog requires the docker daemon and is generally pretty resource intensive while scanning. layerleak has

• KomoD 6mo ago
  > That's true, but as you can see from your paste, Trufflehog requires the docker daemon and is generally pretty resource intensive while scanning. Nothing in his message says it requires the docker daemon? it says it can scan an image from a docker daemon if you want. I just tried myself and it doesn't require docker at all, you don't need anything docker related even installed on the system. I tried them both to compare: - trufflehog: 19 seconds - layerleak: 26 seconds
  • brumbelow 6mo ago
    His paste literally says... " # to scan from the local docker daemon" That aside, I just tested against trufflehog myself. It did take about 10-15%longer for a scan to complete but this is expected. Layerleak is scanning any additional or deleted tags found for the digest while trufflehog only scans the one. I am proud of the project, so I am showing it off. If you dont like, dont use :) Thanks for checking it out.
    • KomoD 6mo ago
      Yeah, like I explained you CAN use an image from a docker daemon if you WANT to: trufflehog docker --image docker://new_image:tag If you don't want to scan from a docker daemon then, you can pull from docker hub: trufflehog docker --image trufflesecurity/secrets or from a tarball: trufflehog docker --image file://path_to_image.tar