Understanding the Risks of Long-Lived Kubernetes Service Account TokensThe popularity of Kubernetes (K8s) as the defacto orchestration platform for the cloud is not showing any sign of pause. This graph, taken from the 2023 Kubernetes Security Report by the security company Wiz, clearly illustrates the trend: As adopti...Jan 29, 2024 · 8 min readgitguardian.hashnode.dev
How to Secure Your Secrets Manager with GitGuardian HoneytokenProtecting sensitive data is a crucial responsibility for modern businesses. To ensure the security of critical information, organizations utilize various tools and strategies. One such tool is a secrets manager, which securely stores and manages sen...Dec 8, 2023 · 5 min readgitguardian.hashnode.dev
HasMySecretLeaked - Building a Trustless and Secure ProtocolHasMySecretLeaked is the first free service that allows security practitioners to proactively verify if their secrets have leaked on GitHub.com. With access to GitGuardian's extensive database of over 20 million records of detected leaked secrets, in...Nov 15, 2023 · 9 min readgitguardian.hashnode.dev
Yes, GitHub's Copilot can Leak (Real) SecretsThere has been a growing focus on the ethical and privacy concerns surrounding advanced language models like ChatGPT and OpenAI GPT technology. These concerns have raised important questions about the potential risks of using such models. However, it...Oct 20, 2023 · 7 min readgitguardian.hashnode.dev
From Code to Cloud: Security for Developers [cheat sheet included]From code development and approval to continuous integration and deployment, each stage presents unique challenges and opportunities to enhance the security of your applications. Download the cheat sheet ⬇️⬇️ By following the recommendations in this...Oct 16, 2023 · 8 min readgitguardian.hashnode.dev
