gitguardian.hashnode.dev·Jan 29, 2024 · 6 min readFive Ways Your CI/CD Tools Can Be ExploitedWe've talked about how Continuous Integration and Continuous Delivery (CI/CD) tools can be a source of secrets sprawl. While it's not as insecure as leaving them laying around in a publicly accessible file, CI/CD pipelines can be exploited in a numbe...00
gitguardian.hashnode.dev·Jan 10, 2024 · 4 min readSecure Your Secrets with .envUsing environment variables to store secrets instead of writing them directly into your code is one of the quickest and easiest ways to add a layer of protection to your projects. There are many ways to use them, but a properly utilized .env file is ...00
gitguardian.hashnode.dev·Dec 21, 2023 · 8 min readEthical Hacking Q&A with Sonya MoissetGitGuardian’s Mackenzie Jackson had the privilege of hosting a webinar on ethical hacking with Snyk’s Sonya Moisset. What follows is a lightly edited transcript of the Q&A after her presentation or watch the Ethical Hacking Q&A video clip on YouTube....00
gitguardian.hashnode.dev·Dec 11, 2023 · 6 min read“Do Not Push To Production” And Other Insecure Coding, Demonstrated By An Ethical HackerIn November, our own Mackenzie Jackson hosted a webinar called “Crack the Code: A Beginner’s Guide to Ethical Hacking” with special guest, Snyk’s Sonya Moisset. Viewers got to see some interesting vulnerabilities and coding practices that made her de...00