Understanding the Risks of Long-Lived Kubernetes Service Account TokensThe popularity of Kubernetes (K8s) as the defacto orchestration platform for the cloud is not showing any sign of pause. This graph, taken from the 2023 Kubernetes Security Report by the security company Wiz, clearly illustrates the trend: As adopti...8 min read·gitguardian.hashnode.devJan 29, 2024
How to Secure Your Secrets Manager with GitGuardian HoneytokenProtecting sensitive data is a crucial responsibility for modern businesses. To ensure the security of critical information, organizations utilize various tools and strategies. One such tool is a secrets manager, which securely stores and manages sen...5 min read·gitguardian.hashnode.devDec 8, 2023
HasMySecretLeaked - Building a Trustless and Secure ProtocolWe can’t see your secrets, but we can tell you if they’ve leaked on GitHub. Here’s how we do it.9 min read·gitguardian.hashnode.devNov 15, 2023
Yes, GitHub's Copilot can Leak (Real) SecretsResearchers successfully extracted valid hard-coded secrets from Copilot and CodeWhisperer, shedding light on a novel security risk.7 min read·gitguardian.hashnode.devOct 20, 2023
From Code to Cloud: Security for Developers [cheat sheet included]From code development and approval to continuous integration and deployment, each stage presents unique challenges and opportunities to enhance the security of your applications. Download the cheat sheet ⬇️⬇️ By following the recommendations in this...8 min read·gitguardian.hashnode.devOct 16, 2023
