Secrets detection
Why We Built the Good Samaritan Program
The first thing GitGuardian ever shipped was a free warning. Now we’re making sure it gets heard.
MOST POPULAR
all tags
other
Why We Built the Good Samaritan Program
The first thing GitGuardian ever shipped was a free warning. Now we’re making sure it gets heard.
AI Agent Security: Best Practices for Safe Deployment
Six AI agent security best practices for teams running coding agents and MCP servers: limit what a compromised agent can reach and catch credential misuse.
AI Agent Security: Six Controls From Nine Real Incidents
An AI agent runs with your credentials and acts before you can stop it. Nine incidents show what that costs. Six controls limit the damage: sandbox the agent, scope its credentials, lock its configuration, log every call, scan the workspace first, and deny by default.
AI Coding Assistants Are Unpredictable. GitGuardian AI Hooks Give You Control
AI coding assistants are unpredictable by design. Learn how AI hooks add deterministic controls and how GitGuardian ggshield blocks secrets before agents can use them.
The campaign that never stopped: tracking GhostAction from 2025 to 2026
The GhostAction supply chain campaign hit 772 public GitHub repositories between Aug. 31 and Sept. 30, 2026, targeting 2,577 secrets. Between Oct 8-9 a new burst hit 30k more, and this time the workflows ran.
Secrets Management Best Practices: 6 Reasons Your Vault Needs Detection
A secrets vault controls the credentials you manage. Detection finds the ones that escaped. Here are six reasons mature secrets management programs need both.
SOPS Guide: How to Encrypt and Manage Secrets in Git, Kubernetes, and CI/CD
Pasted a secret into a chat window and promised to clean it up later? Here's how SOPS works with age, AWS KMS, and HashiCorp Vault.
Public Secrets Monitoring: Find a Credential Leak Beyond Your Borders
GitGuardian found a public GitHub repo tied to CISA leaking 844MB of live credentials. Agents Analysis flags which public leaks are actually yours.
AI Agent Authorization Beyond Authentication: A Look At AWS Dogwood
AWS Dogwood brings stateful authorization to AI agents. Learn how it fits with workload identity, AuthZEN, IAM, and the move away from long-lived credentials.
Generative AI Security: Are Your Developers Pasting Secrets Into LLMs?
This is the fifth post in our "Bring Your Own Source" series. The previous ones covered n8n workflow integration, Salesforce, GitLab CI, and GitHub Gists.
GitHub Copilot Security and Privacy Concerns: Understanding the Risks and Best Practices
Worried about GitHub Copilot’s security and privacy concerns? Learn about potential risks and best practices to protect yourself and your organization while leveraging AI.
AI Coding Agents Are Leaking Credentials: Cursor, Claude Code, Copilot, and MCP
Cursor, Claude Code, and GitHub Copilot leave credentials scattered across config files, logs, and shell history that repository and CI scanners never see. Here's where that trail actually lives, and how to close it.
