mackenzie-gg

3 ms·

1.
by mackenzie-gg 6y ago
Check HackerOne to see if the company is listed. This is a site where white hat hackers can post vulnerabilities and in return get rewarded for bounties. If you have information on a vulnerability for a large social media, you might be loo
2.
by mackenzie-gg 6y ago
What is interesting here though that this, like the Covid-19 leak in Brazil, the leak was on an employees GitHub. Not a companies account. So sure the employee could have prevented it, but from a company perspective. They have no authority
3.
by mackenzie-gg 6y ago
You can put detection in the CI/CD pipeline to prevent from getting into the repository. And in any case. Knowing the horses have run away as soon as possible is pretty essential in damage prevention. What is interesting for me here i
4.
by mackenzie-gg 6y ago
It's a difficult challenge. Secrets detection is probabilistic, without checking the credentials it's nearly impossible to determine, with 100% accuracy, a true vs a false positive. But it has made big improvements. What detection
5.
by mackenzie-gg 6y ago
GitGuardian scans on every event, this includes a public event (when a Repo is made public) and will alert if secrets are found within.
6.
GitOps – an extension of DevOps for modern infrastructure management(blog.gitguardian.com)
2 points by mackenzie-gg 6y ago|0 comments
7.
Building internal secrets detection: how SAP scans Git repos for secrets(blog.gitguardian.com)
1 points by mackenzie-gg 6y ago|0 comments
8.
Secrets detection learning center: complete handbook for dev, SEC, ops(gitguardian.com)
9 points by mackenzie-gg 6y ago|0 comments
9.
How to scan for secrets like API keys using a simple Python script(youtube.com)
1 points by mackenzie-gg 6y ago|1 comments
10.
Why secrets like API keys in Git are such a problem(blog.gitguardian.com)
14 points by mackenzie-gg 6y ago|3 comments
11.
Mitigate Growing Application Security Risks with Automated Secrets Detection(blog.gitguardian.com)
1 points by mackenzie-gg 6y ago|0 comments
12.
How to scan local files for secrets in Python using the GitGuardian API(blog.gitguardian.com)
8 points by mackenzie-gg 6y ago|3 comments
13.
by mackenzie-gg 6y ago
How to scan local files for secrets like API keys and security certificates in python using the GitGuardian API.
14.
Best practices for managing and storing secrets like API keys and credentials(blog.gitguardian.com)
200 points by mackenzie-gg 6y ago|35 comments