DEV Community

#secrets

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Overwrote a secret by mistake? Writing, pulling and rolling back keys
uehara profile
uehara

Overwrote a secret by mistake? Writing, pulling and rolling back keys

#dotvault #secrets #devops #cli
Comments
12 min read
GitHub will block pull_request_target in public repos from December 2
leobaniak profile
Leo

GitHub will block pull_request_target in public repos from December 2

#githubactions #pullrequesttarget #supplychainsecurity #secrets
2
Comments
4 min read
How GitGuardian Secures the Credential Layer: From Discovery to Remediation
dwayne_mcdaniel profile

How GitGuardian Secures the Credential Layer: From Discovery to Remediation

#security #secrets #devsecops #appsec
Comments
16 min read
Stop editing the same value in every .env: one dotvault project for every environment, one Common layer
uehara profile

Stop editing the same value in every .env: one dotvault project for every environment, one Common layer

#dotvault #secrets #devops #cli
Comments
11 min read
2,100 AI Servers Are Leaking GPU Telemetry, and the CVE Is the Boring Part
secbyjasonmiller profile

2,100 AI Servers Are Leaking GPU Telemetry, and the CVE Is the Boring Part

#apiauth #dast #secrets #aiagents
Comments
3 min read
The agent renamed the environment variable in code, but CI still held the old secret name
jeff_pdc profile
Jeff

The agent renamed the environment variable in code, but CI still held the old secret name

#aiagents #configuration #deployment #secrets
Comments
2 min read
The agent added debug logging and wrote the Authorization header to plaintext logs
jeff_pdc profile
Jeff

The agent added debug logging and wrote the Authorization header to plaintext logs

#aiagents #security #logging #secrets
Comments
1 min read
GhostAction used about 1,900 stolen GitHub logins to plant secret-stealing workflows in 30,000 repos
leobaniak profile
Leo

GhostAction used about 1,900 stolen GitHub logins to plant secret-stealing workflows in 30,000 repos

#githubactions #supplychain #secrets #incident
Comments
3 min read
Vercel wants static credentials gone. Its own GitHub Actions deploy still needs one
leobaniak profile
Leo

Vercel wants static credentials gone. Its own GitHub Actions deploy still needs one

#oidc #secrets #vercel #githubactions
Comments
4 min read
Credential Layer Security Explained: Scope and Controls
dwayne_mcdaniel profile

Credential Layer Security Explained: Scope and Controls

#security #devsecops #appsec #secrets
3
Comments 1
17 min read
Stop panic-grepping your lockfile after an npm compromise alert
secbyjasonmiller profile

Stop panic-grepping your lockfile after an npm compromise alert

#supplychain #secrets
Comments
3 min read
Your LLM API Keys Are Cash. The METR Breach Proves It.
secbyjasonmiller profile

Your LLM API Keys Are Cash. The METR Breach Proves It.

#apiauth #secrets #aiagents
Comments
3 min read
Same Extension ID, Different Publisher: What Actually Installs When Your Team Moves to Cursor
secbyjasonmiller profile

Same Extension ID, Different Publisher: What Actually Installs When Your Team Moves to Cursor

#supplychain #secrets #aiagents
Comments
3 min read
Rust `env!()` Macro Exposes API Keys in Compiled Binaries: Secure Secret Management Required
denlava profile

Rust `env!()` Macro Exposes API Keys in Compiled Binaries: Secure Secret Management Required

#security #rust #secrets #binaries
Comments
11 min read
The npm Worm Era: Why Package Signatures Did Not Stop Shai-Hulud
onaeiuspkz profile

The npm Worm Era: Why Package Signatures Did Not Stop Shai-Hulud

#supplychain #npm #cicd #secrets
Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.