4 ms·
It's a difficult challenge. Secrets detection is probabilistic, without checking the credentials it's nearly impossible to determine, with 100% accuracy, a true
by mackenzie-gg 6y ago
It's a difficult challenge. Secrets detection is probabilistic, without checking the credentials it's nearly impossible to determine, with 100% accuracy, a true vs a false positive. But it has made big improvements. What detection solutions have you been using?
- jefftk 6y agoI get automated emails that I didn't sign up for from GitGuardian: "GitGuardian has detected the following Google Key exposed within your GitHub account." My understanding was that they could use an API to check whether it was a real key, but perhaps that doesn't say whether it is a client-side or server-side key?