4 ms·
In the last couple of weeks, I have scanned over 100 public git repos, and 70% of them have secrets leaked. I wonder how much we know about the OSS tools we ins
by lexokoh 2y ago
In the last couple of weeks, I have scanned over 100 public git repos, and 70% of them have secrets leaked. I wonder how much we know about the OSS tools we install into our products or use.
Today, we have everyone building or shipping faster than ever. People often leak sensitive information while creating and sometimes do not realize it because they think the framework should handle that.
This started as a fun project for us, but we have seen how valuable it has become.
I'd love your thoughts and feedback.
Check out securelog.com - an open-source secret and API token analyzer that verifies, scans, cleans, and prevents leakage in your workflow.