Show HN: Git Confirm. Git hook to catch accidentally committed code (TODO/Skip)

Re:Show HN: Git Confirm. Git hook to catch accidentally comm... by john_oshea on Wednesday August 03, 2016 @04:27PM (#12221225)

    git config --add hooks.confirm.match "AKIA"

would probably be a good default for AWS users.

[ Parent | on HN ]

Re:Show HN: Git Confirm. Git hook to catch accidentally comm... by carterehsmith on Wednesday August 03, 2016 @10:33PM (#12223007)

For sure.

If I remember correctly, maybe a year ago, Github actually went through public repos and emailed the people that had AKIAs in the repos. Apparently there were many of them.

Myself, upon reading about that, I went through our (non-public) repo and, sure enough, found like a dozen AKIAs with secret keys and all. Also found a random AKIA in some binary file, false alarm.

But then I was like... wait a second. How about .pem files? Yup, found several. .cer (some SSL certs), id_rsa? - yes to all.

That took a while to fix.

[ Parent | on HN ]