deepfence / deepfence/ThreatMapper

Secret Scanning not working on Linux agents

Open
#2,269 4 comments 0 reactions 1 assignee Claimed by @gnmahanth View on GitHub
bug needs-triage
Dominant language
TypeScript
Stars
5.3k
Forks
631
PR merge metrics
No merged PRs in 30d

Description

# Technical Context
- **Components/Services affected**: Deepfence agent (Linux)
- **Affected Module:** Secret Scanning
- **OS version:** Debian GNU/Linux 12 (bookworm), AMD64
- **Deepfence agent version:** I have no idea; I am not familiar with the agents' architecture but the installer was `deepfence-agent-amd64-2.2.2.tar.gz`

## **Describe the bug**
1. The Secret Scanner is not working in Linux Debian agents. I get an "Error" without any context in Deepfence Web UI as shown below:

image

## What I've done to try to understand the error:

I am mostly grepping through the logs at `/opt/deepfence/df-agents/copilot/var/log/supervisor/deepfenced.log` 

image

I am seeing WARN errors `skip rules update already new` in the logs for deepfence agents in Linux. I don't know what that means, and I don't know either if there's something wrong with my installation (I don't know either if the WARN messages are related, or if this WARN errors may indicate some other issue I'm not even aware of yet, not related to secret scanning):

image

# How I installed the agent:
1. `sudo bash`
2. `export MGMT_CONSOLE_URL="MY DF SERVER IP"`
`export DEEPFENCE_KEY="MY KEY"`
(As per the instructions in the Web UI)
3. ` bash install_deepfence_agent.sh`

## **Expected behavior**
Secret Scanning on Linux hosts working

Thank you, I don't know what to do here, if the error lies on my side or there's something wrong with DF-agents

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.