GitLab DevSecOps Part 7: Finding Secrets in Your Code with Secret Detection

Wed, 28 Sep 2022 00:00:00 +0000

Hard-coded passwords and API keys are still one of the most common ways credentials leak. They get committed by accident, stay in the git history forever, and only show up when someone is already exploiting them. In Part 7 of our GitLab DevSecOps series, Patrick Steger and I add Secret Detection to the same pipeline we have been growing — one line of YAML — and then look at what GitLeaks actually finds, what it quietly misses, and what to do about it.

GitLeaks on Romano Roth

GitLab DevSecOps Part 7: Finding Secrets in Your Code with Secret Detection