News for hackers. Stuff that matters.

A comment on What will happen when you commit secrets to a public Git repo?. Parent comment

Re:What will happen when you commit secrets to a public Git ... by mackenzie-gg on Monday November 09, 2020 @06:00AM (#25033485)
It's a difficult challenge. Secrets detection is probabilistic, without checking the credentials it's nearly impossible to determine, with 100% accuracy, a true vs a false positive. But it has made big improvements. What detection solutions have you been using?
[ Parent | on HN ]
Re:What will happen when you commit secrets to a public Git ... by jefftk on Monday November 09, 2020 @07:32AM (#25034068)
I get automated emails that I didn't sign up for from GitGuardian:

"GitGuardian has detected the following Google Key exposed within your GitHub account."

My understanding was that they could use an API to check whether it was a real key, but perhaps that doesn't say whether it is a client-side or server-side key?

[ Parent | on HN ]