Containers
Docker Client Config
Docker client config files can contain registry authentication material.
Metadata
- id:
containers.docker.config - category:
containers - sensitivity:
critical - subcategory:
docker - artifact types:
credential,configuration - tags:
docker,registry
Path Matchers
| Path | Kind | Platforms |
|---|---|---|
%USERPROFILE%\.docker\config.json | file | windows |
$HOME/.docker/config.json | file | linux, macos |
/root/.docker/config.json | file | linux |
/kaniko/.docker/config.json | file | linux |
Content Indicators
Literal strings:
authscredHelpers
Credential Types
bearer-tokenpassword
Impact
credential_access
References
MongoDB Atlas CLI Config
MongoDB Atlas CLI configuration profiles can contain Atlas project IDs, organization IDs, access tokens, refresh tokens, and API keys.
Container Runtime Secret Files
Runtime secret mount directories can contain injected credentials, tokens, certificates, and application secrets.