Expert Insights: Secrets - Comprehensive Guide

Skip to content

DEV Community

👋 Sign in for the ability to sort posts by relevant, latest, or top.

uehara

Oct 30

Stop editing the same value in every .env: one dotvault project for every environment, one Common layer

#dotvault #secrets #devops #cli

11 min read

Oct 29

2,100 AI Servers Are Leaking GPU Telemetry, and the CVE Is the Boring Part

#apiauth #dast #secrets #aiagents

3 min read

Jeff

Oct 28

The agent renamed the environment variable in code, but CI still held the old secret name

#aiagents #configuration #deployment #secrets

2 min read

Jeff

Oct 27

The agent added debug logging and wrote the Authorization header to plaintext logs

#aiagents #security #logging #secrets

1 min read

Leo

Oct 27

GhostAction used about 1,900 stolen GitHub logins to plant secret-stealing workflows in 30,000 repos

#githubactions #supplychain #secrets #incident

3 min read

Leo

Oct 24

Vercel wants static credentials gone. Its own GitHub Actions deploy still needs one

#oidc #secrets #vercel #githubactions

4 min read

Dwayne McDaniel for GitGuardian

Oct 22

Credential Layer Security Explained: Scope and Controls

#security #devsecops #appsec #secrets

17 min read

Oct 17

Stop panic-grepping your lockfile after an npm compromise alert

#supplychain #secrets

3 min read

Oct 16

Your LLM API Keys Are Cash. The METR Breach Proves It.

#apiauth #secrets #aiagents

3 min read

Oct 14

Same Extension ID, Different Publisher: What Actually Installs When Your Team Moves to Cursor

#supplychain #secrets #aiagents

3 min read

Denis Lavrentyev

Oct 12

Rust `env!()` Macro Exposes API Keys in Compiled Binaries: Secure Secret Management Required

#security #rust #secrets #binaries

11 min read

OnaEiuspkz

Oct 11

The npm Worm Era: Why Package Signatures Did Not Stop Shai-Hulud

#supplychain #npm #cicd #secrets

3 min read

Oct 10

The new Shai-Hulud worm scans 469 credential paths. The number that should worry you is 189.

#supplychain #secrets #aiagents

3 min read

jeffrey

Oct 9

Protecting access tokens on developer workstations: the attack path that skips your CI controls

#secrets #endpoint #developertools

3 min read

Oct 8

Patching Elementor Pro doesn't remove the webshell. Check before you close the ticket.

#supplychain #secrets

3 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.