← Scan another repo

github.com/gohugoio/hugo

@ 33d1f2c853ec

Submitted 8/5/2026, 11:03:30 PM · Status: ok

Risk grade
D
65 / 100
Findings
125
0 critical3 high14 medium1 low107 info0 on CISA KEV0ATT&CK
Showing 125 of 125 findings

Findings

  • Detected generic-api-key: Detected a Generic API Key, potentially exposing access to various services and sensitive operations
    Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
    gitleaks
  • 'apk add' is missing '--no-cache'
    You should use 'apk add' with '--no-cache' to clean package cached data and reduce image size.
    trivyDockerfile:22
  • 'apk add' is missing '--no-cache'
    You should use 'apk add' with '--no-cache' to clean package cached data and reduce image size.
    trivyDockerfile:16

This report is public.