cwinq

cwinq on Hacker News

GitGuardian analysis of the bitwarden/CLI compromise

Posted by cwinq on Friday April 24, 2026 @01:17AM
from the blog.gitguardian.com dept.

https://blog.gitguardian.com/bitwarden-cli-gitguardian-views-on-helloworm00/

( Read More... | no comments | 4 points | on HN )

Renovate and Dependabot: The New Malware Delivery System

Posted by cwinq on Monday April 13, 2026 @09:05AM
from the blog.gitguardian.com dept.

https://blog.gitguardian.com/renovate-dependabot-the-new-malware-delivery-system/

( Read More... | no comments | 5 points | on HN )

Re:Show HN: Local Privacy Firewall-blocks PII and secrets before ChatG... on Friday December 12, 2025 @02:54AM (#46241869)

You can try GitGuardian, it is very powerful and free for individual developers and small teams. It has precommit hooks, detection in IDE and all.

Re:Ask HN: Prevent Secrets from Committing to Repos on Tuesday June 17, 2025 @11:38AM (#44300446)

How big is your team? GitGuardian is free for team below 25 dev. And it will make sure secrets don't make it to your code and highlight any historical leaks too.

Re:Why ChatGPT is a security concern for your organization-even if you... on Friday April 14, 2023 @02:08PM (#35572702)

ChatGPT may not be used by all organizations and may even be banned. But that doesn't mean you don't have exposure to the security risks it contains. This post looks at why ChatGPT should be part of your threat landscape.

Why ChatGPT is a security concern for your organization-even if you don't use it

Posted by cwinq on Friday April 14, 2023 @02:08PM
from the blog.gitguardian.com dept.

https://blog.gitguardian.com/chatgpt-security-concern/

( Read More... | 2 comments | 2 points | on HN )

Re:Dropbox admits 130 of its private GitHub repos were copied after ph... on Wednesday November 02, 2022 @06:19PM (#33443702)

some details on this breach: https://blog.gitguardian.com/dropbox-breach-hack-github-circ...

Re:Toyota Accidently Exposed a Secret Key Publicly on GitHub for Five ... on Friday October 14, 2022 @03:33AM (#33200627)

Well, GitGuardian is free for individual developers (20 K of them use it - n°1 app on GitHub market place) and for team below 25. So I guess the masses can enjoy secrets free code! https://github.com/marketplace/gitguardian

Re:Toyota Accidently Exposed a Secret Key Publicly on GitHub for Five ... on Friday October 14, 2022 @03:30AM (#33200608)

you can try ggshield - https://github.com/GitGuardian/ggshield -

Re:Toyota Accidently Exposed a Secret Key Publicly on GitHub for Five ... on Friday October 14, 2022 @03:29AM (#33200600)

You can definitely use pre commit hooks for this like the one of ggshield https://github.com/GitGuardian/ggshield - remediation is far quicker when the secret does't make it to the codebase!

Re:Secrets: A command-line tool to prevent committing secret keys into... on Wednesday April 20, 2022 @03:08AM (#31093719)

you may also want to look at ggshield: https://github.com/GitGuardian/ggshield