GitHub DevSecOps Part 7: Finding Secrets in Your Code with Secret Scanning

Tue, 14 Feb 2023 00:00:00 +0000

API keys, tokens, and passwords still leak into repositories all the time — sometimes by accident, sometimes by a developer who genuinely did not know better. In Part 7 of our GitHub DevSecOps series, Patrick Steger and I switch on GitHub’s built-in Secret Scanning, add a custom pattern of our own, try out push protection, and look honestly at what the feature finds and where it falls short.

Push Protection on Romano Roth

GitHub DevSecOps Part 7: Finding Secrets in Your Code with Secret Scanning