DEV Community

#secrets

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Invite by email, grant one environment, shut a leaver out in 60 seconds: roles and teams in dotvault
uehara profile

Invite by email, grant one environment, shut a leaver out in 60 seconds: roles and teams in dotvault

#dotvault #secrets #devops #security
Comments
15 min read
Rotate a leaked API key without stopping your services: dotvault hands out the new value first
uehara profile
uehara

Rotate a leaked API key without stopping your services: dotvault hands out the new value first

#dotvault #secrets #devops #security
Comments
18 min read
Separating Secrets from Config: Best Practices for Secure .env File Management in Private Repositories
maricode profile

Separating Secrets from Config: Best Practices for Secure .env File Management in Private Repositories

#security #config #secrets #compliance
Comments
10 min read
Real secrets sit inside 1,122 Claude Code files on GitHub
alexlee7359 profile

Real secrets sit inside 1,122 Claude Code files on GitHub

#claudecode #github #secrets #aisecurity
Comments
7 min read
Who revoked that token? Reading the dotvault audit log
uehara profile
uehara

Who revoked that token? Reading the dotvault audit log

#dotvault #secrets #devops #security
Comments
7 min read
Pasting .env into Claude Code? Give the agent one dotvault service token instead
uehara profile
uehara

Pasting .env into Claude Code? Give the agent one dotvault service token instead

#dotvault #secrets #claudecode #ai
Comments
9 min read
GitHub will block pull_request_target in public repos from December 2
leobaniak profile
Leo

GitHub will block pull_request_target in public repos from December 2

#githubactions #pullrequesttarget #supplychainsecurity #secrets
2
Comments
4 min read
2,100 AI Servers Are Leaking GPU Telemetry, and the CVE Is the Boring Part
secbyjasonmiller profile

2,100 AI Servers Are Leaking GPU Telemetry, and the CVE Is the Boring Part

#apiauth #dast #secrets #aiagents
Comments
3 min read
The agent renamed the environment variable in code, but CI still held the old secret name
jeff_pdc profile
Jeff

The agent renamed the environment variable in code, but CI still held the old secret name

#aiagents #configuration #deployment #secrets
Comments
2 min read
The agent added debug logging and wrote the Authorization header to plaintext logs
jeff_pdc profile
Jeff

The agent added debug logging and wrote the Authorization header to plaintext logs

#aiagents #security #logging #secrets
Comments
1 min read
GhostAction used about 1,900 stolen GitHub logins to plant secret-stealing workflows in 30,000 repos
leobaniak profile
Leo

GhostAction used about 1,900 stolen GitHub logins to plant secret-stealing workflows in 30,000 repos

#githubactions #supplychain #secrets #incident
Comments
3 min read
Vercel wants static credentials gone. Its own GitHub Actions deploy still needs one
leobaniak profile
Leo

Vercel wants static credentials gone. Its own GitHub Actions deploy still needs one

#oidc #secrets #vercel #githubactions
Comments
4 min read
Giving CI your own login? Pull secrets into GitHub Actions with one service token
uehara profile
uehara

Giving CI your own login? Pull secrets into GitHub Actions with one service token

#dotvault #secrets #githubactions #devops
Comments
11 min read
Pasting the same Sentry DSN into every project? Put it in Global Keys once and bind it
uehara profile
uehara

Pasting the same Sentry DSN into every project? Put it in Global Keys once and bind it

#dotvault #secrets #devops #cli
1
Comments
15 min read
Credential Layer Security Explained: Scope and Controls
dwayne_mcdaniel profile

Credential Layer Security Explained: Scope and Controls

#security #devsecops #appsec #secrets
3
Comments 1
17 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.