dynein icon indicating copy to clipboard operation
dynein copied to clipboard

Create a workflow to audit the accidental credential disclosure

Open StoneDot opened this issue 10 months ago • 0 comments

As I described in a pull request I created, the developer should use git-secrets to prevent the inadvertent committing of credentials into the repository. Besides, it is preferable if we can detect the accidental disclosure in our CI/CD process.

I found that the trufflehog action is useful to achieve the above detection. We can find the example in aws/elb-doctor.

StoneDot avatar Apr 24 '24 09:04 StoneDot