GitLab DevSecOps Part 7: Finding Secrets in Your Code with Secret Detection

Wed, 28 Sep 2022 00:00:00 +0000

Hard-coded passwords and API keys are still one of the most common ways credentials leak. They get committed by accident, stay in the git history forever, and only show up when someone is already exploiting them. In Part 7 of our GitLab DevSecOps series, Patrick Steger and I add Secret Detection to the same pipeline we have been growing — one line of YAML — and then look at what GitLeaks actually finds, what it quietly misses, and what to do about it.

GitLab DevSecOps Part 2: Creating a Simple Project and Your First Pipeline

Wed, 10 Aug 2022 00:00:00 +0000

Before we can shift any security checks left, we need a project, a repository, and a pipeline that actually builds something. In Part 2 of our GitLab DevSecOps series, Patrick Steger and I log into GitLab, create a new .NET Core project from a template, and look at the .gitlab-ci.yml file that GitLab generates for us — including the build and test jobs that will become the foundation for everything we add later.

GitLab CI on Romano Roth

GitLab DevSecOps Part 7: Finding Secrets in Your Code with Secret Detection

GitLab DevSecOps Part 2: Creating a Simple Project and Your First Pipeline