search

gravitational / teleport

The easiest, and most secure way to access and protect all of your infrastructure.
https://goteleport.com
GNU Affero General Public License v3.0
16.94k stars 1.7k forks source link

[sec_scan][1] Add `teleport.access_graph.v1.SecretsScannerService` #43462

Open tigrato opened 4 days ago

tigrato commented 4 days ago

This PR introduces the teleport.access_graph.v1.SecretsScannerService that will be used by Teleport SSH nodes to report authorized_keys and user's laptops to report secrets found on them.

The ReportAuthorizedKeys uses node TLS certs signed by HostCA for authentication while ReportSecrets leverages the device trust credentials (requires that the device is enrolled) to report secrets without requiring valid user credentials.

Part of https://github.com/gravitational/access-graph/issues/637