SecretScanner http server post format

[Ethon Wu]

Hello,
I run SecretScanner as a http server.
But I do not know how to use curl command to POST data to http server.
This is my example:

curl -X POST http://0.0.0.0:8080/secret-scan -d '{"image_name_with_tag_list": ["<my_image_name:tag>"]}' -H 'Content-Type: application/json'

And output is:

{"error":"Image Name with tag list is required "}

I have trace code, and in http.go file, I found the runSecretScan func in line 49.
But I always POST fail to http server, what is POST data format?

[Saurabh Kumar]

Hi @Ethonwu
Thank you for trying SecretScanner, currently the SecretScanner http server is written for the use with ThreatMapper only. We will get back to you with a generic http service.

[Ethon Wu]

Thank you, i find this api server mode input para is depend on registry_image_save.py options.
I am researching this python code, if I have some research result such as: find some POST data pattern, I will try to update this info on README

[Harshvardhan Karn]

Hi @Ethonwu, the feature to run SecretScanner as a independent HTTP server mode has been added. Please refer to this PR: #67
I'll update the README with this.
thanks

[Harshvardhan Karn]

TODO:

• Update Readme with standalone mode