Fix secret detection in layer history

docker · Jan 5, 2023 · 5d32054 · 5d32054
1 parent 3eb6de3
commit 5d32054
Showing 1 changed file with 1 addition and 3 deletions.
diff --git a/sbom/trivy.go b/sbom/trivy.go
@@ -18,7 +18,6 @@ package sbom
 
 import (
 	"context"
-	"encoding/json"
 	"fmt"
 	"strings"
 
@@ -93,10 +92,9 @@ func trivySbom(cache *registry.ImageCache, lm *types.LayerMapping, resultChan ch
 	}
 	config := &cache.Source.Image.Metadata.Config
 	for o, h := range config.History {
-		js, _ := json.MarshalIndent(h, "", "  ")
 		secrets := scanner.Scan(secret.ScanArgs{
 			FilePath: "history",
-			Content:  js,
+			Content:  []byte(fmt.Sprintf("%s\n%s\n%s", h.CreatedBy, h.Author, h.Comment)),
 		})
 		if len(secrets.Findings) > 0 {
 			result.Secrets = append(result.Secrets, convertSecretFindings(secrets, types.SecretSource{