DEV Community

#secrets

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Giving CI your own login? Pull secrets into GitHub Actions with one service token
uehara profile
uehara

Giving CI your own login? Pull secrets into GitHub Actions with one service token

#dotvault #secrets #githubactions #devops
Comments
11 min read
Pasting the same Sentry DSN into every project? Put it in Global Keys once and bind it
uehara profile
uehara

Pasting the same Sentry DSN into every project? Put it in Global Keys once and bind it

#dotvault #secrets #devops #cli
1
Comments
16 min read
Still sending .npmrc over Slack? Push whole files, scan before you commit
uehara profile
uehara

Still sending .npmrc over Slack? Push whole files, scan before you commit

#dotvault #secrets #devops #cli
Comments
13 min read
Overwrote a secret by mistake? Writing, pulling and rolling back keys
uehara profile
uehara

Overwrote a secret by mistake? Writing, pulling and rolling back keys

#dotvault #secrets #devops #cli
Comments
12 min read
GitHub will block pull_request_target in public repos from December 2
leobaniak profile
Leo

GitHub will block pull_request_target in public repos from December 2

#githubactions #pullrequesttarget #supplychainsecurity #secrets
2
Comments
4 min read
Stop editing the same value in every .env: one dotvault project for every environment, one Common layer
uehara profile

Stop editing the same value in every .env: one dotvault project for every environment, one Common layer

#dotvault #secrets #devops #cli
Comments
11 min read
2,100 AI Servers Are Leaking GPU Telemetry, and the CVE Is the Boring Part
secbyjasonmiller profile

2,100 AI Servers Are Leaking GPU Telemetry, and the CVE Is the Boring Part

#apiauth #dast #secrets #aiagents
Comments
3 min read
The agent renamed the environment variable in code, but CI still held the old secret name
jeff_pdc profile
Jeff

The agent renamed the environment variable in code, but CI still held the old secret name

#aiagents #configuration #deployment #secrets
Comments
2 min read
The agent added debug logging and wrote the Authorization header to plaintext logs
jeff_pdc profile
Jeff

The agent added debug logging and wrote the Authorization header to plaintext logs

#aiagents #security #logging #secrets
Comments
1 min read
GhostAction used about 1,900 stolen GitHub logins to plant secret-stealing workflows in 30,000 repos
leobaniak profile
Leo

GhostAction used about 1,900 stolen GitHub logins to plant secret-stealing workflows in 30,000 repos

#githubactions #supplychain #secrets #incident
Comments
3 min read
Vercel wants static credentials gone. Its own GitHub Actions deploy still needs one
leobaniak profile
Leo

Vercel wants static credentials gone. Its own GitHub Actions deploy still needs one

#oidc #secrets #vercel #githubactions
Comments
4 min read
How GitGuardian Secures the Credential Layer: From Discovery to Remediation
dwayne_mcdaniel profile

How GitGuardian Secures the Credential Layer: From Discovery to Remediation

#security #secrets #devsecops #appsec
1
Comments
16 min read
Credential Layer Security Explained: Scope and Controls
dwayne_mcdaniel profile

Credential Layer Security Explained: Scope and Controls

#security #devsecops #appsec #secrets
3
Comments 1
17 min read
Stop panic-grepping your lockfile after an npm compromise alert
secbyjasonmiller profile

Stop panic-grepping your lockfile after an npm compromise alert

#supplychain #secrets
Comments
3 min read
Your LLM API Keys Are Cash. The METR Breach Proves It.
secbyjasonmiller profile

Your LLM API Keys Are Cash. The METR Breach Proves It.

#apiauth #secrets #aiagents
Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.