↓ Skip to main content
Romano Roth
  1. Tags/

Secret Detection

GitLab DevSecOps Part 7: Finding Secrets in Your Code with Secret Detection

·5 mins
DevSecOps GitLab CI/CD DevOps Secret Detection Application Security GitLeaks GitLab CI
Hard-coded passwords and API keys are still one of the most common ways credentials leak. They get committed by accident, stay in the git history forever, and only show up when someone is already exploiting them. In Part 7 of our GitLab DevSecOps series, Patrick Steger and I add Secret Detection to the same pipeline we have been growing — one line of YAML — and then look at what GitLeaks actually finds, what it quietly misses, and what to do about it.