I am not sure what you set out to prove or think you have proven... but the article doesn't give me an indication on either one of those things.

If anything, you have certainly proven that there are still people confident enough to write a blog about something they don't understand. Thanks for that

Pull my finger...

Yeah I would say that the 'some point' is frontier quantum research. Which makes it even more confusing as to how something like this is not caught.

pyinc is, to my knowledge, the first pure-Python, stdlib-only implementation of a Salsa/Skyframe-style incremental query kernel with a documented from-scratch consistency contract. Prior Python incremental-computation work either targets narrow domains (TA indicators, ML experiment tracking) or depends on a platform (think Palantir Foundry); pyinc is a general-purpose kernel you can vendor into any project. v1.0.1 is now available on pypi!

I read the research paper from a link on HN and loved it so much I had to use it. Hopefully folks find as interesting as I do!

neat, is there any practical speed up or applications?

Thanks for the advice! Did not even consider that. I just updated it

I couldn't find anything comparable to Trufflehog for Docker images, even though I have constantly read articles about "secrets discovered in public images." So I built my own (hopefully) comparable tool.

But trufflehog supports docker images already? The trufflehog readme has examples[0]

    # to scan from a remote registry
    trufflehog docker --image trufflesecurity/secrets 
    # to scan from the local docker daemon

    trufflehog docker --image docker://new_image:tag

    # to scan from an image saved as a tarball
    trufflehog docker --image file://path_to_image.tar

[0]: https://github.com/trufflesecurity/trufflehog#11-scan-a-dock...

That's true, but as you can see from your paste, Trufflehog requires the docker daemon and is generally pretty resource intensive while scanning.

layerleak has neither of those issues or requirements.

Try it and let me know what you think.

> That's true, but as you can see from your paste, Trufflehog requires the docker daemon and is generally pretty resource intensive while scanning.

Nothing in his message says it requires the docker daemon? it says it can scan an image from a docker daemon if you want.

I just tried myself and it doesn't require docker at all, you don't need anything docker related even installed on the system.

I tried them both to compare:

- trufflehog: 19 seconds

- layerleak: 26 seconds

His paste literally says...

" # to scan from the local docker daemon"

That aside, I just tested against trufflehog myself. It did take about 10-15%longer for a scan to complete but this is expected. Layerleak is scanning any additional or deleted tags found for the digest while trufflehog only scans the one. I am proud of the project, so I am showing it off. If you dont like, dont use :)

Thanks for checking it out.

Yeah, like I explained you CAN use an image from a docker daemon if you WANT to:

    trufflehog docker --image docker://new_image:tag

If you don't want to scan from a docker daemon then, you can pull from docker hub:

    trufflehog docker --image trufflesecurity/secrets 

or from a tarball:

    trufflehog docker --image file://path_to_image.tar