layerleak

Layerleak is an OCI image secret scanner that leverages OCI image internals to analyze public images from various OCI-compliant registries without relying on a local Docker daemon. It offers read-only scanning capabilities, detecting over 60 types of secrets while deduplicating findings by secret fingerprint and collapsing duplicate context snippets. Notable features include support for scanning image layers, config metadata, and history, as well as a built-in HTTP API for integration.