← Scan another repo

github.com/gohugoio/hugo

@ 70db201ed4f7

Submitted 8/4/2026, 10:25:54 AM · Status: ok

Risk grade
D
65 / 100
Findings
125
0 critical3 high14 medium1 low107 info0 on CISA KEV0ATT&CK
Showing 125 of 125 findings

Findings

  • Detected generic-api-key: Detected a Generic API Key, potentially exposing access to various services and sensitive operations
    Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
    gitleaks
  • 'apk add' is missing '--no-cache'
    You should use 'apk add' with '--no-cache' to clean package cached data and reduce image size.
    trivyDockerfile:16
  • 'apk add' is missing '--no-cache'
    You should use 'apk add' with '--no-cache' to clean package cached data and reduce image size.
    trivyDockerfile:22

This report is public.