secret scanning in KNIME hub

Feedback & Ideas
1

Hi, there :partying_face: :partying_face: :partying_face:

I am not familiar with the current state of “secret scanning” on the KNIME Hub, but it appears that it may not exist. While users are ultimately responsible for their own security, like it is worth noting that credentials should have been used instead of the string type. It could be beneficial to implement security checks during the KNIME Hub upload process to enhance security measures.

Ref:

2

Hi @HaveF -

This is a good idea! I’m not sure what we have planned in this area, but I can certainly mark your suggestion down.

Thanks for the feedback!

4

@HaveF I created a workflow which allows you to scan your hub for insecure storage of secrets whether stored as plaintext or cyphertext. This can encourage users to rather use key vaults/secret store available in KNIME Hub or other cloud platforms SecretScanner2025 – KNIME Community Hub

2 Likes