The Curious Engineer

All blogs / Security

GitGuardian Blog

blog.gitguardian.com

A blog for developers, Application Security and other cybersecurity professionals to learn about secrets in source code, API security, IaC and DevSecOps.

SecurityDevOps / SRE / infrastructure

’21’22’23’24’25’26
Posts
729 from 8 Jun 2021 to 26 Oct 2026
Posting
weekly (130 in the last year)
Kind
company blog
Feed
https://blog.gitguardian.com/rss/

2026 126

  1. OWASP Top 10 Kubernetes Security Risks Explained
  2. Responding to php2shell When You Don’t Know Your Secrets
  3. New Railway Incident: Treat Every Env Variable as Exposed
  4. Credential Layer Security Explained: Scope and Controls
  5. Leaked API Keys in LLMs: How AI Agents Expose Secrets
  6. Why We Built the Good Samaritan Program at GitGuardian
  7. AI Agent Security: Best Practices for Safe Deployment
  8. AI Agent Security: Six Controls From Nine Real Incidents
  9. AI Hooks for Claude Code, Cursor, and Codex: Block Secrets
  10. GhostAction Returns: 772 Repos Hit, 30k More in Oct
  11. SOPS Tutorial: Encrypt Secrets in Git, CI/CD, Kubernetes
  12. GitGuardian Agents Analysis: Know If A Leak Is Yours
  13. AWS Dogwood: AI Agent Authorization Beyond Authentication
  14. Generative AI Security: Catch Secrets in Your AI Gateway
  15. GitHub Copilot Security: Key Risks and Best Practices
  16. AI Coding Agents Are Leaking Credentials on Endpoints
  17. GitGuardian's Mixin Kit extends Docker Sandboxes for safer AI coding
  18. GitHub App Private Keys: 474 Leaked Keys Still Work
  19. Why a Supply Chain Attack Targets Your Credentials
  20. What Is AI Autonomy? Levels, Meaning, and Credential Risk
  21. Credential Rotation Blast Radius: 8 Questions Checklist
  22. Public Secrets Monitoring: AI Analysis of Leaked Credentials
  23. OWASP Top 10 CI/CD Security Risks Explained
  24. Credential Security vs EDR: What Actually Protects Secrets
  25. AWS S3 Bucket Security: What Secret Scanning Adds
  26. AI Agent Threat Response: Why Runtime Detection Isn't Enough
  27. Agentic AI Security Comes Down to Access, Not the Trick
  28. ChainDrop npm Worm: AI Agents And Credential Abuse
  29. Credential Exposure and the Security Stack Gap
  30. Inside the LiteLLM Hack: 153GB and 2,488 Organizations
  31. BSides Las Vegas 2026: Following the Trust Relationships Attackers Are Targeting
  32. Your AI Agents Are Using Your Credentials
  33. Vault Coverage Is the Missing Metric in the NHI Programs
  34. Mini Shai-Hulud's Latest Wave: 280 New Places
  35. 40 Million Fake Commits Flood GitHub’s Public Feed
  36. n8n Security: How Leaked API Keys Expose Your Encryption Key
  37. Credential Harvesting: How Attackers Collect Secrets in 2026
  38. Blast Radius After a Laptop Compromise: What to Rotate
  39. Hugging Face Breach: AI Agent Security Lessons | GitGuardian
  40. How to Measure Time to Revoke for Exposed Credentials
  41. Why SAST and DAST Aren't Enough for Secrets Security
  42. Blast Radius: What a Leaked Secret Breaks | GitGuardian
  43. Four More Supply Chain Attacks Hit npm and PyPI | Shai-Hulud
  44. How to Measure Time to Revoke for Exposed Credentials
  45. The Perimeter Moved to the Laptop and Developer Endpoint
  46. Identity Infrastructure: Why Credentials Are the Layer Directories Don't Secure
  47. CISA GitHub Leak: Incident Response Lessons
  48. GitGuardian Power for Amazon Kiro | Secrets Detection
  49. Every Laptop Is a Credential Store: Complete Map of Hidden Secrets
  50. IEEE Cloud Summit 2026: The Tunnels No One Mapped
  51. Unified Secrets Security with GitGuardian and AWS Secrets Manager
  52. AI Is the Newest Developer To Misunderstand Secrets In Your Git History
  53. Identiverse 2026: The Challenges Of Solving Identity For AI Agents At Scale
  54. Hunting Leaked PyPI Tokens: 62 Live, 125 Packages Exposed
  55. BSides San Antonio 2026: Following Trust Across Applications, Cloud, and Compliance
  56. How Five PostgreSQL Optimizations Sped Up Our Dashboard
  57. Extending Our Mission With Developer Endpoint Protection
  58. Gitguardian Agent Skills: Secret Detection and Remediation For AI-Assisted Development
  59. KCD New York 2026: Trust, Agents, and the Work Behind the Work
  60. You Can't Secure What You Can't See: Making Non-Human Identities Governable
  61. Reliability Lessons From the Edges at SREday NYC
  62. Designing Identity for the Agentic Enterprise: The Okta AI Identity Summit
  63. Four Credential-Harvesting Campaigns Hit Open Source Ecosystems in Two Weeks
  64. How We Migrated the Heart of Our Platform to Rust
  65. Top 16 Secrets Management Tools and Platforms for 2026
  66. Initial Access Changed, The Attack Path Did Not: Findings From The Verizon 2026 DBIR
  67. BSides312 2026: Security Basics Under New Pressure
  68. Grafana and GitHub Breached: The Risk When Private Code Leaks
  69. Leaked Kubernetes Secrets: Impact Assessment and Mitigation Strategies
  70. MCP Governance Framework at Scale for Enterprises 2026
  71. How We Got a CISA GitHub Leak Taken Down in Under a Day
  72. San Francisco Secure Software and AppSec Summit 2026: The Next AppSec Operating Model
  73. AI Agents Security for Developers: Don't Let Your Agents Become a Liability
  74. Mini Shai-Hulud: A persistent supply-chain worm
  75. GitGuardian Now Flags Admin and Overprivileged Identities Across AWS, Entra, and Okta
  76. GCSI 2026: AI Readiness in a City Built in Layers
  77. Local Guardrails for Secrets Security in the Age of AI Coding Assistants
  78. Identity Access Management Strategy for Non-Human Identities 2026
  79. The Bot Left a Fingerprint: Detecting and Attributing LLM-Generated Passwords
  80. Short-Lived Credentials in Agentic Systems: A Practical Trade-off Guide
  81. @bitwarden/cli - GitGuardian Views on helloworm00
  82. No Off Season: Three Supply Chain Campaigns Hit npm, PyPI, and Docker Hub in 48 Hours
  83. Top 11 Identity Orchestration Tools and Platforms for 2026
  84. SnowFROC 2026: Secure Defaults, Real Trust, and a Better Layer on Top
  85. Vercel April 2026 Incident: Non-Sensitive Environment Variables Need Investigation Too
  86. ATLSECCON 2026: Context, Identity, and Restraint in Modern Security
  87. AI Agents Authentication: How Autonomous Systems Prove Identity
  88. The Future Of GitHub Actions Security And What You Can Do Right Now
  89. BSides MKE 2026: Security Maturity in Changing Conditions
  90. Renovate & Dependabot: The New Malware Delivery System
  91. When We Use AI To Ship Fast, Secrets Spread Fast
  92. Gartner IAM Summit 2026: Identity Expanded Faster Than Most Programs Did
  93. NHI Governance Is the Outcome. GitGuardian Is How You Get There
  94. Key Leaks, Vault Failures, and TEE Attacks: Highlights from RWC 2026
  95. Between AI Urgency and AI Fatigue at RSAC 2026
  96. The Team PCP Snowball Effect: A Quantitative Analysis
  97. How GitGuardian Enables Rapid Response to the LiteLLM Supply Chain Attack
  98. BSides SF 2026: Looking At Security Beyond The Next Big Bet
  99. Trivy’s March Supply Chain Attack Shows Where Secret Exposure Hurts Most
  100. Honeytokens on the Developer Workstation: When Cleanup Takes Time
  101. Chainguard Assemble 2026 and the Security Factory Mindset
  102. The State of Secrets Sprawl 2026: AI-Service Leaks Surge 81% and 29M Secrets Hit Public GitHub
  103. Who Actually Owns This Service Account?
  104. Top 10 Non-Human Identity Security Tools and Platforms for 2026
  105. ConFoo 2026: Guardrails for Agentic AI, Prompts, and Supply Chains
  106. 2,622 Valid Certificates Exposed: A Google-GitGuardian Study Maps Private Key Leaks to Real-World Risk
  107. Protecting Developers Means Protecting Their Secrets
  108. Claude Code Security: Why the Real Risk Lies Beyond Code
  109. Shifting Security Left for AI Agents: Enforcing AI-Generated Code Security with GitGuardian MCP
  110. Confronting Vault Sprawl And The Risks It Brings
  111. SRE Playbook: A Guide to Discover and Catalog Non-Human Identities (NHI)
  112. AI Is Making Security More Agile: Highlights from ChiBrrCon 2026
  113. Why We Raised $50M: The Non-Human Identity Crisis Driving Our Series C
  114. GitGuardian Raises $50M Series C to Address Non-Human Identities Crisis and AI Agent Security Gap
  115. Engineering at GitGuardian: Our Technical Challenges for 2026
  116. Aligning NHI Governance With Financial Services Regulatory Expectations
  117. Your Secrets Need a VDP, Not Just a Bug Bounty
  118. GitGuardian NHI Governance Now Gives More Comprehensive Visibility
  119. Agentic AI & NHI Security: Key Lessons from NHIcon 2026
  120. OpenClaw (Moltbot) Personal Assistant Goes Viral – And So Do Your Secrets
  121. Responding to Exposed Secrets - An SRE's Incident Response Playbook
  122. Boards Focus On Risk, Resilience, and Operational Realities: Where NHI Governance Fits In
  123. HMAC Secrets Explained: Authentication You Can Actually Implement
  124. GitGuardian Closes 2025 with Strong Enterprise Momentum, Protecting Millions of Developers Worldwide
  125. What AI Agents Can Teach Us About NHI Governance
  126. Stop Leaking API Keys: The Backend for Frontend (BFF) Pattern Explained

2025 12

  1. Secret Scanning Tools 2026: Protect Code and Prevent Credential Leaks
  2. How To Use ggshield To Avoid Hardcoded Secrets [cheat sheet included]
  3. GitHub Backup: Expert Guide to Secure Your Repositories
  4. BSides Chicago 2025: Operationalizing Identity Risk In Cloud-Native Environments
  5. Shai-Hulud Attack: A Persistent Secret Leaking Campaign
  6. The GhostAction Campaign: 3,325 Secrets Stolen Through Compromised GitHub Workflows
  7. The Nx "s1ngularity" Attack: Inside the Credential Leak
  8. From Alert to Action: Best Practices to Handle Responsible Disclosure
  9. GitHub Copilot Security: How AI Tools Can Leak Real Secrets
  10. Security First, Transparency Always: Inside GitGuardian’s Responsible Disclosure Process
  11. How to Remove File from Git Commit Safely Cheat Sheet
  12. OWASP NHI Top 10 Risks for 2025 Explained by GitGuardian

2024 3

  1. Identities Do Not Exist in a Vacuum: A View on Understanding Non-Human Identities Governance
  2. Docker Security Best Practices Cheat Sheet for Secure Containers
  3. Misconfigurations in Google Firebase lead to over 19.8 million leaked secrets

2023 4

  1. Developer Education - GitGuardian Supports Your Learning Style
  2. A look at the future of supply chain and national security: Updates from CISA and NIST
  3. GCP Secret Manager: Secure Secrets Management Guide
  4. GitGuardian Secrets Detectors Q1 2023 Wrap-Up

2022 4

  1. GitGuardian Secrets Detectors 2022 Wrap-Up
  2. Infrastructure as Code Security [Security Zines]
  3. How to Avoid Security Risks After Leaking Credentials and API Keys on GitHub
  4. What is the DMCA? How does it work?

2021 1

  1. What are MITRE ATT&CK initial access techniques

Undated 579

  1. How to handle secrets in jupyter notebooks
  2. How to handle secrets in terraform
  3. How to handle secrets in helm
  4. Secrets api management
  5. Github actions security cheat sheet
  6. 8 easy steps to set up multiple git accounts
  7. Mutual tls mtls authentication
  8. Vault or revoke guidance and governance for incident response teams
  9. Building a multi agent security pipeline with googles a2a protocol and gitguardian
  10. Aws iam outbound identity federation with gitguardian
  11. Push to vault
  12. Gitguardian launches channel partner program
  13. Oidc for developers auth integration
  14. How to use helm with continuous deployment cd
  15. Authentication and authorization
  16. Celery tasks retries errors
  17. Managing aws iam with terraform
  18. Secure your secrets with env
  19. Generic secrets beyond github push protection
  20. How orange business transformed secrets security with a prevention first approach
  21. How to handle secrets with jenkins
  22. How to handle secrets with azure key vault
  23. How to handle secrets in kubernetes
  24. How to handle secrets in python
  25. Handling secrets with aws secrets manager
  26. Before you deploy that llm nhi
  27. Owasp ai testing guide
  28. Agentic ai secdays france
  29. Chatgpt security concern
  30. Automated guard rails for vibe coding
  31. Building a secure llm gateway
  32. Why its urgent to deal with your hard coded credentials
  33. Secrets in source code episode 3 3 building reliable secrets detection
  34. How git guardian helps with pci dss 4 0s password requirements
  35. Symmetric cryptography key management
  36. Dev mtl 2025
  37. A complete guide to transport layer security tls authentication
  38. Handle secrets in ci cd pipelines
  39. Shai hulud 2
  40. Github push protection enhancing open source security with limitations to consider
  41. How machine learning transforms security alert chaos into actionable intelligence
  42. Owasp top 10 2025
  43. Workload identity day zero atlanta
  44. A practical guide to prioritize and remediate thousands of secrets leaks incidents
  45. Kubecon 2025
  46. Why detecting generic credentials is a game changer
  47. How to handle secrets in docker
  48. Api key security 7
  49. Queen city con 0x3
  50. Q3 2025 nhi security gets more real
  51. The secret to your artifactory a deep dive into critical exposures
  52. Techno security and digital forensics conference west 2025
  53. Working towards improved pam widening the scope and taking control
  54. Github secrets leak free audit
  55. The hidden cost of secrets sprawl
  56. Secret leaks private vs public repos
  57. Secrets managers integrations
  58. Lascon xv
  59. Multicloud security architecture
  60. Breaking mcp server hosting
  61. Scanning github gists for secrets
  62. Role of cisos iam nhi
  63. Oauth for mcp emerging enterprise patterns for agent authorization
  64. Incyber forum canada 2025
  65. Securing your machine identities
  66. Why machine identity security is your next critical battlefront
  67. Identity lifecycle management for nhis
  68. Building chromegg a chrome extension for real time secret detection
  69. Nhi dashboard to monitor aws iam
  70. How managed identities are transforming multicloud security
  71. Corncon 11
  72. Non human identity security zero trust architecture
  73. Spice wimse and scitt
  74. Crappy code crappy copilot
  75. Sreday sf 2025
  76. How cybercriminal organizations weaponize exposed secrets
  77. Terraform secrets management
  78. Gitguardian secrets risk assessment know your true exposure for free
  79. Red hat gitlab breach the crimson collectives attack
  80. Devops days philly 2025
  81. Security lessons npm publishing
  82. How to make security policies a team effort
  83. Owasp appsecdays france 2025
  84. Gitguardian introduces one click secret revocation to accelerate incident response
  85. Defining nhi ownership
  86. Bring your own source plug gitguardian into any workflow in minutes
  87. Detect secrets in gitlab ci logs
  88. Djangocon us 2025
  89. Leveraging credentials as unique identifiers
  90. A complete guide to finding hidden credentials in salesforce
  91. Blueteamcon 2025
  92. Principle of least privilege nhis
  93. Ephemeral identities
  94. Secrets redaction at runtime lambda extension
  95. Securely access aws from your eks cluster
  96. How gitguardian and delinea solve improper offboarding of nhis at scale
  97. Bsides las vegas 2025
  98. Probably secure ai systems
  99. How ai agents are reshaping security architecture
  100. Q2 2025 recap gitguardian sharpens the edge on secrets security and agentic ai protection
  101. Sharepoint zero day highlight hidden secrets risk
  102. The non human identity crisis key insights from gitguardian secdays virtual 2025
  103. Exploiting public app key leaks
  104. Gitguardian launches its mcp server putting secrets security in the developers hands
  105. From secrets sprawl to secretless snowflakes journey through nhi lifecycle management
  106. Bsides satx 2025
  107. Five real world attack chains involving nhis
  108. Gitguardian partners with guidepoint security to strengthen application security offerings
  109. Secrets analyzer
  110. Comparing secrets detection solutions
  111. Showmecon 2025
  112. Identiverse 2025
  113. How gitguardian and akeyless secure machine identities across environments
  114. Why exposed secrets stay valid
  115. Bsides312 2025
  116. Security starts with developer enablement lessons from php tek 2025
  117. Navigating the new frontiers of identity insights from kuppingercole eic summit 2025
  118. Nist recommendations for secure devsecops
  119. Global team seminar
  120. Securing critical infrastructure gitguardian partners with one isac to protect oil natural energy operations
  121. Fresh from the docks uncovering 100 000 valid secrets in dockerhub
  122. A look into the secrets of mcp
  123. Gitguardian joins health isac
  124. Rsa conference 2025
  125. Xai secret leak disclosure
  126. Q1 2025 recap gitguardian doubles down on secrets security and machine identity control
  127. Bsides seattle 2025
  128. Bsidessf 2025
  129. Verizon dbir 2025
  130. Introducing ggscout unified visibility and detection for your vaulted secrets
  131. Atlseccon 2025 security readiness means human readiness
  132. Gitguardian launches nhi governance
  133. Compromised tj actions
  134. Secrets managers redundancy
  135. Nhi security
  136. The state of secrets sprawl 2024
  137. Stl techweek 2025
  138. Bsides sd 2025
  139. Secrets leaked outside the codebase
  140. How to handle secrets in go
  141. Securing containers with seccomp
  142. How to handle secrets configuration management tools
  143. Detection engineering case study
  144. Security velosity
  145. Snowfroc 2025
  146. Why understanding your secrets is the key to faster remediation
  147. Keeping secrets out of logs
  148. A peek on cloud security jssi 2025
  149. The state of secrets sprawl 2025
  150. Gitguardian is now the overall most installed github marketplace app 2
  151. Devnexus 2025
  152. The reality of secrets management
  153. Hashicorp vault integration
  154. Open source mlops stack
  155. Demystifying docker optimizing images
  156. Why hedge funds must prioritize secrets security
  157. Codemash 2025
  158. Nhi security in the age of ai
  159. Wild west hackin fest mile high
  160. Intellic0n 2025
  161. Secret to your artifactory part 2
  162. How to handle mobile app secrets
  163. Securing the software delivery pipeline with honeytokens
  164. Pulumi v s terraform the definitive guide to choosing your iac tool
  165. How honeytokens can detect and stop black hat computer hackers
  166. Api key rotation best practices
  167. Dynamic application security testing benefits pitfalls and top open source solutions
  168. Secure by default integrating end to end security in vermeers software development lifecycle
  169. How to secure your container registries with gitguardians honeytoken
  170. How to add gitguardian honeytokens in ci cd pipelines
  171. Talking about data security an introduction to aws kms and hashicorp vault
  172. Devsecops introduction accelerating software development
  173. Terraform project for managing vault secrets in a kubernetes cluster
  174. Sast bridging the gap for modern developers
  175. Application security posture management with gitguardian and armorcode
  176. How to handle aws secrets
  177. How to secure your scm repositories with gitguardian honeytokens
  178. Protecting your software supply chain understanding typosquatting and dependency confusion attacks
  179. What is sbom
  180. What is policy as code an introduction to open policy agent
  181. How adding security into devops accelerates the sdlc pt 2
  182. How to setup jenkins with gitguardian kubernetes
  183. The significance of honeypots and the rise of honeytokens
  184. Managing aws iam with terraform part 2
  185. Securing containers with seccomp part 2
  186. Supply chain security sigstore and cosign part ii
  187. Secure your productivity tools with gitguardian honeytoken
  188. Best practices for managing developer teams in github orgs
  189. 9 things to consider when choosing an sca tool
  190. Aws iam security best practices
  191. Securing your ci cd an oidc tutorial
  192. Secure code review cheat sheet included
  193. Platform engineering building your developer portal with backstage part 1
  194. How to secure your iac and configuration management tools with gitguardians honeytoken
  195. Platform engineering building your developer portal with backstage part 2
  196. Platform engineering and security a very short introduction
  197. Github restore and disaster recovery better get ready
  198. Open policy agent with kubernetes tutorial pt 1
  199. Thinking like a hacker commanding a bot army of leaked twitter accounts
  200. Thinking like a hacker aws keys in private repos
  201. Thinking like a hacker stealing secrets with a malicious github action
  202. Open policy agent with kubernetes tutorial pt 2
  203. Github security 101
  204. Abusing stolen private keys
  205. Ci pipelines 5 risks to assess
  206. Whats new in the 2021 owasp top10
  207. Improving the nations cybersecurity minimum testing standards for software vendors part 2
  208. Hardening your k8s pt 2
  209. Improving the nations cybersecurity what is critical software and how should it be secured part 1
  210. How adding security into devops accelerates the sdlc pt 1
  211. Supply chain security secrets and modern security frameworks
  212. Supply chain security what is the slsa part i
  213. Thinking like a hacker finding leaked code on github
  214. Key highlights from the new nist ssdf
  215. Kubernetes tutorial part 3 authn authz
  216. Ciso roadmap first 90 days
  217. Data breach response a 6 steps emergency plan
  218. Kubernetes tutorial part 2 network
  219. Kubernetes tutorial part 1 pods
  220. Hardening your k8 pt 1
  221. Application security program appsec
  222. Shift your ci to github actions
  223. 9 extraordinary terraform best practices
  224. Infrastructure as code everything you need to know
  225. Security in infrastructure as code with terraform
  226. Infrastructure as code security best practices cheat sheet included
  227. The new frontier in cybersecurity embracing security as code
  228. Credential access breaking down the mitre att ck framework
  229. Getting started with spiffe
  230. Dependency confusion attacks
  231. Always be updating
  232. Open source vulnerability databases comparison
  233. The runtime secrets security gap
  234. Container security scanning vulnerabilities risks and tooling
  235. Pipeline integrity and security in devsecops
  236. Open source software security
  237. Secure by design software in devsecops
  238. Vulnerability management lifecycle in devsecops
  239. How to respond to an aws key honeytoken trigger a detailed guide
  240. A guide to cloud security posture management cspm
  241. Uncovering thousands of unique secrets in pypi packages
  242. Container registries
  243. Secrets at the command line
  244. Eo 14144 nhi
  245. Doctolib slashed secrets incidents
  246. 2024 recap
  247. Gitguardian secrets detection q1 2021 update
  248. Internal monitoring improved integrations
  249. Developer in the loop
  250. Security illusion of the fortress
  251. Blackhat 2021 recap
  252. What happened in the u s department of the treasury breach a detailed summary
  253. Owasp global appsec sf 2024
  254. Corncon x powering cybersecurity innovation through human connection
  255. Agile devopsdays des moines 2024
  256. Owasp top 10 for mobile secrets
  257. Bsides orlando 2024
  258. Soss fusion 2024
  259. Scary secrets 2024
  260. Securewv 2024
  261. Ai summit vancouver 2024
  262. Black alps 2024 highlights from switzerland cybersecurity ecosystem
  263. Devopsdays chattanooga 2024
  264. Bsides austin 2024
  265. The ultralytics supply chain attack connecting the dots with gitguardians public monitoring data
  266. Security culture
  267. Why automotive companies must prioritize secrets detection
  268. The hidden challenges of automating secrets rotation
  269. Ai false positive remover v2
  270. Secrets detection collaboration tools
  271. Custom host validity checks
  272. Voice of practitioners 2024
  273. Precision recall security zines
  274. The extent of hardcoded secrets from development to production
  275. Visual studio code extension
  276. A quick overview of the digital operational resilience act dora
  277. Risks prematurely closing incidents
  278. Secrets security quarter of innovation
  279. Elevating your secrets security hygiene h1 roundup of our product innovations
  280. Docker zombie layers
  281. How to get there spiffe
  282. European hosting data sovereignty
  283. Unveiling public leak checks for hardcoded secrets in the gitguardian platform
  284. Secrets credentials api git
  285. Creating a honeypot token tutorial
  286. Secrets detection accuracy precision recall explained
  287. Security tools shift left
  288. Top 10 file extensions
  289. Indian government breached
  290. Safely open source software best practices
  291. Three hundred secrets detectors and counting
  292. Gitguardian is proud sponsor of owasp
  293. Latest from microsoft lapsus breach
  294. Securing your sdlc software development life cycle
  295. Poisoning the source how and why attackers are targeting developer accounts
  296. Git hooks automated secrets detection
  297. Should we target zero false positives
  298. Detector of the month datadog january 2022
  299. 4 reasons msps
  300. Github security
  301. Glossary
  302. Secret sprawl
  303. United nations databreach jan
  304. Bitbucket integration gitguardian
  305. Presence and validity checks product update
  306. Validity check product update
  307. How gitguardian helps bokeh
  308. Supply chain attack 6 steps to harden your supply chain
  309. Enteringft120
  310. Security chats igor director of development at a large computer software company
  311. Portrait julia
  312. The state of secrets sprawl 2022
  313. Detector of the month stripe webhook url
  314. Ciso live mirantis yury koldobanov director of it
  315. Building an appsec product at gitguardian
  316. Fast scans return earlier
  317. 10 rules for better cloud security
  318. Portrait edouard
  319. Automating security testing in your ci pipelines with gitguardian and circleci
  320. Security chats what developers say about us
  321. Gitguardian now available on the github marketplace
  322. Ciso live danny
  323. Gitguardian is now soc 2 type i compliant
  324. Detector of the month redis march 2022
  325. Customer story jon erik
  326. Developer portrait joao
  327. 8 steps to keep remote work secure
  328. New offices
  329. Devopsdays chicago 2022
  330. A beginners guide to owasp
  331. Exposed git folders exposed
  332. Securing developer environments cloud ides
  333. Bsides slc community fun and learning in salt lake city
  334. Azure repos native integration
  335. Intrusion detection through cyber deception disrupting attacks with an active defense
  336. How lemontech protects their repositories with gitguardian
  337. Secrets detection build vs buy
  338. Devops midwest a community event full of devsecops best practices
  339. Php tek 2023
  340. Scan secrets
  341. One year and a half scanning github for sensitive data
  342. Interview with balderton
  343. Sap scan git repos secrets
  344. Implementing secrets detection
  345. Gitops an extension of devops for modern infrastructure management
  346. Leaked secrets in code repositories
  347. Gitguardian fic cybersecurity award
  348. Bfm business gitguardian
  349. State of secrets sprawl 2021
  350. Talend customer story
  351. Rsa takeaways the modern day bank heists
  352. Q4 product roundup find and fix hardcoded secrets where and when it matters
  353. Github exposed private ssh key
  354. Developer portrait pierre lalanne
  355. Mongodb credentials detector
  356. Gitguardian on boarding experiencefeedback from an account executive
  357. Shift left moving security to the development phase the case of secrets detection in code repositories
  358. Setting up a pre commit git hook with gitguardian shield to scan for secrets
  359. Highlights from the 2021 rsa conference attack and defend a unique approach to exploiting credentials
  360. The journey to backend engineer at gitguardian
  361. Red team chronicals miracle solution philippe caturegli
  362. Leading rd in a tech company
  363. Happy 20th birthday owasp
  364. Red team chronicles episode 4
  365. The detector of the month november 2021
  366. Red team chronicles episode 5
  367. Tools for reproducible detailed and meaningful benchmarks
  368. Announcing our 44m fundraise to further enable the appsec shared responsibility model
  369. Github universe 2021 overview what you missed from github confrence
  370. Gitguardian is now part of pagerdutys verified partners program
  371. From securing the battlespace to securing the codebase
  372. Detector of the month okta december 2021
  373. Security chats abbas head of infosec at a tech services company
  374. Security chats don magee security engineer at a tech services company
  375. Appsec new year resolutions find inspiration in this report from gartner on mitigating software supply chain security threats
  376. Detecting custom secrets patterns is in public beta
  377. Detector of the month planetscale february 2022
  378. Samsung and nvidia are the latest companies to involuntarily go open source potentially leaking company secrets
  379. Devsecops and the appsec shared responsibility model
  380. Security zines 1 git secrets leaks
  381. Q2 product roundup making secrets detection programs a reality for the enterprise
  382. Cloudnativesecuritycon 2023 a unique community event focused on the future of open source and cloud native security
  383. Security zines 2 compromising ci cd pipelines
  384. Automate your way out of hardcoded secrets with gitguardians playbooks
  385. Event driven automation using new custom webhooks
  386. Review your hardcoded secrets incidents in konduktos appsec orchestration platform
  387. Cdcon gitopscon co evolving open source devops communities in one conference
  388. Life too short to review spaces
  389. Love death triggers
  390. Top 10 practices for secure software development
  391. Black hat 2022 summary
  392. Gitguardian named leader in g2 and sourceforge winter 2023 reports
  393. Cybersecurity learning across sectors how iccws brings academics government and private companies together
  394. How we built a supply chain security watchtower meet saas sentinel
  395. Bsidessf a two day community celebration
  396. Security zines 3 ggshield
  397. Canary tokens
  398. Gartner recognizes gitguardian as a sample vendor in two hype cycle reports this summer
  399. Portrait mehdi
  400. Cybertech nyc 2022
  401. Announcing gitguardian labs
  402. Yves mimeran joins gitguardian as the vp channel
  403. Efficiently computing permissions at scale our engineering approach
  404. Joining tam
  405. Reducing the risks of secrets exposure in the sdlc a case study from an enterprise deployment
  406. Gitguardian is soc2 typeii compliant
  407. It takes a team to solve hardcoded secrets
  408. Securewv 2022
  409. The state of security in australia post medibank and optus
  410. Understanding identity and access management best practices cheat sheet included
  411. Developer week 2023
  412. Portrait alexandre
  413. 10 tips to optimize postgresql queries in your django project
  414. The state of secrets sprawl 2023
  415. Gitguardian now available on aws marketplace
  416. Rsa conference 2023 devsecops and the future of security
  417. Growing as an engineer gitguardian
  418. How to secure your ci cd pipeline
  419. A guardians portrait dhia productops
  420. Voice of practitioners the state of secrets in appsec
  421. Quality assurance engineering at gitguardian
  422. Gitguardian at appsec village honeytokens for the blue team
  423. Bsidesaustin 2023 cybersecurity in the texas tech capital
  424. Lessons from lapsus building a comprehensive secrets management program
  425. Create and manage your severity rules
  426. External attack surface management what are you missing out on
  427. Verizon 2023 dbir credential leaks
  428. Building resilient and secure systems devoxx poland
  429. How your secrets management maturity can impact your dora metrics
  430. Code security manual code reviews aint enough
  431. Codesecdays brings security leaders together to build a world without software security issues
  432. Nebraska code developing in the great plains
  433. Protect your keys lessons from the azure key breach
  434. Defcon 31 appsec village
  435. Researcher finds github admin credentials thanks to misconfigurations
  436. Developer week cloudx 2023
  437. Defending your castle raising walls versus detecting intruders
  438. Dev up 2023
  439. Findings from the sophos 2023 active adversary report
  440. Microsoft ai involuntarily exposed a secret giving access to 38tb of confidential data for 3 years
  441. Secrets management takes more than just tools
  442. Top 10 appsec experts you should follow
  443. Texas cyber summit 2023
  444. The art of protecting secrets eight essential concepts for secops practitioners
  445. Rvasec 2023 improving ourselves our security and our community
  446. Elevate your secrets security posture with gitguardian 2023 releases
  447. Bsides las vegas 2023
  448. Hardcoded secret at the heart of the dell compellent vmware vulnerability
  449. 8docker images api and private keys
  450. Techno security digital forensics conference east 2023
  451. Three recent examples of why you need to know how vulnerable your secrets are
  452. Git guardian received 18 g2 badges for fall 2023
  453. Blue team con 2024
  454. Get caught up with ggshield
  455. Book crafting secure software
  456. Protect your company secrets free github leaks audit in one click
  457. Why understanding your open source licenses matters
  458. Why you need an sbom software bill of materials
  459. The backdoor that almost compromised ssh security
  460. Is your roadmap prioritizing memory safe programming languages
  461. Empowering developers in code security
  462. Year in review gitguardians own security team 2
  463. Sca security zines
  464. Rsa conference 2024
  465. Honeytokens security zines
  466. Uber breach 2022
  467. Malware stealing credentials
  468. Codecov supply chain breach
  469. The secrets of the new york times source code breach 2
  470. Cyberark integration tutorial
  471. Developer experience is security our answer
  472. Cve of the month checkpoint security gateway exploit
  473. How hackers used stolen github oauth tokens
  474. Honeytokens protect your holy grail
  475. Bsidessf 2024
  476. Bsides312 2024
  477. Showmecon 2024
  478. Bsides knoxville 2024
  479. Ggshield cli authentication oauth python
  480. Bsides boulder 2024
  481. Cloudnativesecuritycon 2024
  482. Cve of the month the supplychain attack hidden for 10 years
  483. Fix your code track the remediation
  484. Agile2024
  485. Demystifying github cached views the hidden danger
  486. Bsideslv 2024
  487. Def con 32
  488. Drupal govcon 2024
  489. Devopsdays birmingham al 2024
  490. Fp remover cuts false positives by half
  491. Zombie leaks
  492. Benchmarking postgresql 16
  493. Looking beyond code for secrets leaks
  494. Codesecdays 2024
  495. Security threats from the twitch leak
  496. Toyota accidently exposed a secret key publicly on github for five years
  497. Twitters leak illustrates why source code should never be sensitive
  498. Year in review gitguardians own security team
  499. Balancing ai performance and safety lessons from pydata berlin
  500. Codesecdays france insights and highlights
  501. Red team chronc vol2
  502. Red team chronicles comic
  503. Good samaritan confidence scorer ai
  504. Gitguardian self hosted
  505. Protect secrets with cyberark and gitguardian integration
  506. Self hosted team
  507. Guardian goofs 5 honeytokens explained
  508. Redteam chronicles episode1 pentesting
  509. Security chats blake devsecops engineer at a large computer software company
  510. Security chats andy senior security engineer at an insurance company
  511. Cyphercon 6
  512. Automated secrets detection internal repositories
  513. Good application security posture requires good data
  514. Using env vars or not environment variables
  515. Company news key hires for the executive team and a selection in the french tech 2030 program
  516. Were teaming up with snyk to strengthen developer security
  517. Guardian goofs 2
  518. Jetbrains teamcity cve 2024 27198
  519. Sca and eo 14028
  520. Are the fears about the eu cyber resilience act justified
  521. Wrapping up 2023 new detectors your favorite features and whats coming next in the gitguardian platform
  522. Lessons on secrets security from datadog research
  523. Atlseccon 2024
  524. Phptek 2024
  525. Gitguardian honeytoken
  526. Dropbox breach hack github circleci
  527. Using gitguardian honeytoken cheat sheet included
  528. Gitguardian raises 12million
  529. Hunting for secrets in docker hub
  530. From vulnerability to advantage turn exposed secrets into your best allies to detect intrusion
  531. A maturity model for secrets management
  532. Automated severity scoring comes to the gitguardian secrets detection platform
  533. Remediating incidents with the gitguardian api cheat sheet included
  534. How to create and use honeytokens step by step
  535. Honeytoken adventure from beta to beyond
  536. From github leak to pwn a hackers kill chain
  537. Hasmysecretleaked building a trustless and secure protocol
  538. Announcing has my secret leaked
  539. Bsides atlanta 2023
  540. How to secure your secrets managers with gitguardian honeytoken
  541. Navigating cloud and application security insights from the gartner security and risk management summit
  542. Api world 2023
  543. Webinar recap
  544. Sumo logic breach shows leaked credentials still a persistent threat
  545. What to do if you expose a secret
  546. Techbash 2023
  547. Do not push to production and other insecure code demonstrated by an ethical hacker
  548. Ethical hacking q a with sonya moisset
  549. Coordinating and prioritizing remediation with gitguardian
  550. Ai and cybersecurity in 2024 whats changing and why it matters
  551. Honeytokens for peace of mind
  552. Guardian goofs
  553. Understanding the risks of long lived kubernetes service account tokens
  554. Leading machine learning innovations at gitguardian
  555. Three tips to use ai securely at work
  556. Has my secret leaked security zines
  557. Five ways your ci cd tools can be exploited
  558. Evaluating secrets detection platforms is messy
  559. The secrets out how stolen auth tokens led to cloudflare breach
  560. Chibrrcon iv 2024
  561. Unveiling the cyber threats to healthcare beyond the myths
  562. Evaluating the gitguardian secrets detection platform a roadmap
  563. Civo navigate 2024
  564. Secs cybersecurity risk management strategy governance and incident disclosure rule what you should know
  565. Guardian profile aslan pishdad
  566. Guardian goofs 3
  567. How to disseminate honeytokens at scale step by step guide to deployment jobs
  568. Microsoft breach 2024
  569. Snowfroc 2024 securing the future with owasp community in denver
  570. Three mechanisms to protect your git repositories
  571. Sops security zines
  572. Best security advice
  573. Scale 21x
  574. Atlanta cloud conference 2024
  575. Taking the long view gitguardians approach to market relevance in cyber
  576. Guardian goofs 4
  577. Secrets management needs quiz
  578. Sisense breach
  579. Hackspacecon 2024