--- title: "Thomas Segura (@ThomasSegura) | Hashnode" description: "I write technical content about DevSecOps, AppSec, Supply Chain and Cloud Security. Read the latest articles by Thomas Segura on Hashnode." url: "https://hashnode.com/@ThomasSegura" --- @ThomasSegura # Thomas Segura @ThomasSegura · Joined January 2023 I write technical content about DevSecOps, AppSec, Supply Chain and Cloud Security ### [Understanding the Risks of Long-Lived Kubernetes Service Account Tokens](https://gitguardian.hashnode.dev/understanding-the-risks-of-long-lived-kubernetes-service-account-tokens?utm_source=hashnode&utm_medium=feed) The popularity of Kubernetes (K8s) as the defacto orchestration platform for the cloud is not showing any sign of pause. This graph, taken from the 2023 Kubernetes Security Report by the security company Wiz, clearly illustrates the trend: As adopti... 8 min read · [gitguardian.hashnode.dev](https://gitguardian.hashnode.dev/understanding-the-risks-of-long-lived-kubernetes-service-account-tokens?utm_source=hashnode&utm_medium=feed) [Jan 29, 2024](https://hashnode.com/posts/understanding-the-risks-of-long-lived-kubernetes-service-account-tokens/65b76a66ae44dd798b37cce7) ### [How to Secure Your Secrets Manager with GitGuardian Honeytoken](https://gitguardian.hashnode.dev/how-to-secure-your-secrets-manager-with-gitguardian-honeytoken?utm_source=hashnode&utm_medium=feed) Protecting sensitive data is a crucial responsibility for modern businesses. To ensure the security of critical information, organizations utilize various tools and strategies. One such tool is a secrets manager, which securely stores and manages sen... 5 min read · [gitguardian.hashnode.dev](https://gitguardian.hashnode.dev/how-to-secure-your-secrets-manager-with-gitguardian-honeytoken?utm_source=hashnode&utm_medium=feed) [Dec 8, 2023](https://hashnode.com/posts/how-to-secure-your-secrets-manager-with-gitguardian-honeytoken/65732c5e749aed3bdd543cfe) ### [HasMySecretLeaked - Building a Trustless and Secure Protocol](https://gitguardian.hashnode.dev/hasmysecretleaked-building-a-trustless-and-secure-protocol?utm_source=hashnode&utm_medium=feed) We can’t see your secrets, but we can tell you if they’ve leaked on GitHub. Here’s how we do it. 9 min read · [gitguardian.hashnode.dev](https://gitguardian.hashnode.dev/hasmysecretleaked-building-a-trustless-and-secure-protocol?utm_source=hashnode&utm_medium=feed) [Nov 15, 2023](https://hashnode.com/posts/hasmysecretleaked-building-a-trustless-and-secure-protocol/6554e221c708fbcad2ca7bac) ### [Yes, GitHub's Copilot can Leak (Real) Secrets](https://gitguardian.hashnode.dev/yes-githubs-copilot-can-leak-real-secrets?utm_source=hashnode&utm_medium=feed) Researchers successfully extracted valid hard-coded secrets from Copilot and CodeWhisperer, shedding light on a novel security risk. 7 min read · [gitguardian.hashnode.dev](https://gitguardian.hashnode.dev/yes-githubs-copilot-can-leak-real-secrets?utm_source=hashnode&utm_medium=feed) [Oct 20, 2023](https://hashnode.com/posts/yes-githubs-copilot-can-leak-real-secrets/65326d26c826be921214cf8f) ### [From Code to Cloud: Security for Developers \[cheat sheet included\]](https://gitguardian.hashnode.dev/from-code-to-cloud-security-for-developers-cheat-sheet-included?utm_source=hashnode&utm_medium=feed) From code development and approval to continuous integration and deployment, each stage presents unique challenges and opportunities to enhance the security of your applications. Download the cheat sheet ⬇️⬇️ By following the recommendations in this... 8 min read · [gitguardian.hashnode.dev](https://gitguardian.hashnode.dev/from-code-to-cloud-security-for-developers-cheat-sheet-included?utm_source=hashnode&utm_medium=feed) [Oct 16, 2023](https://hashnode.com/posts/from-code-to-cloud-security-for-developers-cheat-sheet-included/652d60e823ee868c0e24f9b9)