5 ms·
Lots of dummy ones in tests for sure. I’m going to follow up with some deeper analysis on this topic in a few weeks, but you’d be surprised.
by orf 3y ago
Lots of dummy ones in tests for sure. I’m going to follow up with some deeper analysis on this topic in a few weeks, but you’d be surprised.
- chanux 3y agoThanks for the fantastic work! So you found 57 live AWS keys[1]. That's out of 1631 according to your stats (If I didn't misread something). I wonder how many of the top two in the list are live :D Google API Key 4,015 OpenAI API Key 3,531 [1] https://tomforb.es/i-scanned-every-package-on-pypi-and-found-57-live-aws-keys/ https://tomforb.es/i-scanned-every-package-on-pypi-and-found...
- orf 3y agoOh no, that’s the first incarnation of this project. It scans the code without committing it. The project that leverages GitHub secret scanning found a lot more.