News for hackers. Stuff that matters.

A comment on Launch HN: Datree (YC W20) – Best practices and security policies on each commit. Parent comment

Re:Launch HN: Datree (YC W20) – Best practices and security ... by ThePhysicist on Tuesday March 10, 2020 @02:23PM (#22538030)
As far as I know Github has their own technology for blocking code pushes that contains e.g. AWS secrets. I think it happened a lot that people pushed such secrets to the platform and Github's streaming API makes/made it really easy for adversaries to catch those and start abusing them within seconds.
[ Parent | on HN ]
Re:Launch HN: Datree (YC W20) – Best practices and security ... by eyarz on Tuesday March 10, 2020 @02:33PM (#22538126)
you are right but blocking secretes is only a subset of what our engine can do. also, as far as I know, the secret blocking feature github is offering is ONLY for public repos.
[ Parent | on HN ]