3 ms·
Not posting secrets to public GitHub repos doesn't need red teaming.
by parineum 5mo ago
Not posting secrets to public GitHub repos doesn't need red teaming.
- ceejayoz 5mo agoA red team might well notice that the build process doesn't check for accidentally committed secrets.
- gumby271 5mo agoAnd yet, here we are.
- jnovek 5mo agoStoring a bunch of passwords in a plain-text list that an individual can access violates zero-trust AND least-privilege which I think a red team might have some opinions on.
- wil421 5mo agoAt my job the commits wouldn’t have even made it to our private GitHub repo. The scanners would’ve rejected it when you tried to push a commit. They find keys and tokens all the time.