Containers

Container Runtime Secret Files

Runtime secret mount directories can contain injected credentials, tokens, certificates, and application secrets.

Metadata

  • id: containers.runtime-secret-files
  • category: containers
  • sensitivity: critical
  • artifact types: credential, token, configuration
  • tags: container, secrets

Path Matchers

PathKindPlatforms
/run/secrets/**globlinux
/var/secrets/**globlinux

Credential Types

  • password
  • access-token
  • private-key

Impact

  • credential_access

References

On this page