4 ms·
Search your existing code for secrets. Review all your commits before pushing. Some tools can help with that: https://martinfowler.com/articles/session-secret
by pabs3 4y ago
Search your existing code for secrets. Review all your commits before pushing.
Some tools can help with that:
https://martinfowler.com/articles/session-secret.html https://martinfowler.com/articles/session-secret.html
https://github.com/trufflesecurity/trufflehog https://github.com/trufflesecurity/trufflehog
https://about.sourcegraph.com/blog/no-more-secrets https://about.sourcegraph.com/blog/no-more-secrets
https://github.com/Yelp/detect-secrets https://github.com/Yelp/detect-secrets
https://docs.github.com/en/developers/overview/secret-scanning-partner-program#joining-the-secret-scanning-program-on-github https://docs.github.com/en/developers/overview/secret-scanni...
https://github.com/godaddy/tartufo https://github.com/godaddy/tartufo
https://github.com/GitGuardian/ggshield https://github.com/GitGuardian/ggshield
https://github.com/awslabs/git-secrets https://github.com/awslabs/git-secrets
https://github.com/sirwart/secrets https://github.com/sirwart/secrets
https://thoughtworks.github.io/talisman/ https://thoughtworks.github.io/talisman/
https://gitleaks.io/ https://gitleaks.io/