About CredScope
CredScope analyzes Docker Compose and GitHub Actions configuration and imported Gitleaks findings without executing repository content or validating credentials.
CredScope 0.2.2
CredScope is a deterministic, offline-first static credential exposure and reachability analyzer for Docker Compose and GitHub Actions.
- By Bavlik
- Open Source
- Portable
Technical details
| Publisher | Bavlik |
|---|---|
| Author | Abdallah Alotaibi |
| Version | 0.2.2 |
| License | Apache-2.0 |
| Installer type | zip |
| Architecture | x64, arm64 |
| Package ID | Bavlik.CredScope |
Install CredScope from the command line
- Install with Windows Package Manager
winget install --id=Bavlik.CredScope -e- Update to the latest version
winget upgrade --id=Bavlik.CredScope -e- Uninstall
winget uninstall --id=Bavlik.CredScope -e
CredScope adds this command to the command line: credscope.
Frequently asked questions
Is CredScope free?
Yes. CredScope is free and open-source software released under the Apache-2.0 license.
What is the latest version of CredScope?
The latest version is 0.2.2.
Is it safe to download CredScope?
The download button links to the official installer published on github.com, the same file Windows Package Manager installs. You can verify the downloaded file by comparing its SHA-256 checksum with 4cdd55b0d4fcca555a1f3d4c9e8cfbee98e7e69e26a2d3efb030bf2e3f6a85e8.
Which Windows versions does CredScope support?
CredScope runs on Windows and is available for 64-bit (x64), ARM64 systems.
How do I uninstall CredScope?
Open Settings › Apps › Installed apps, find CredScope and select Uninstall. From the command line, run winget uninstall --id=Bavlik.CredScope -e.
Is there a portable version of CredScope?
Yes. CredScope is available as a portable ZIP archive (credscope_0.2.2_windows_amd64.zip, 64-bit (x64)) that runs without installation. Copy it to any folder or USB drive and run it from there.
Alternatives to CredScope
Other Development kits programs for Windows from different developers.
Syft 1.54.1
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
Grype 0.121.0
A vulnerability scanner for container images and filesystems
pinact 5.0.2
pinact is a CLI to edit GitHub Workflow and Composite action files and pin versions of Actions and Reusable Workflows. pinact can also update their versions and verify version annotations.
Trivy 0.76.1
Trivy is a comprehensive and versatile security scanner.
Secrets OPerationS 3.13.3
Simple and flexible tool for managing secrets
Lazydocker 0.25.2
Terminal UI for both docker and docker-compose