About this tag
The credential leaks tag on WindowsForum.com covers exposed secrets and the risks they create for developers and IT teams. A recent discussion highlights a Truffle Security study that scanned 224 million public GitHub repositories and found 543,699 unique credentials that still authenticated when tested, with the median secret exposed for 784 days. The thread also examines GitHub push protection gaps and the automated defenses Microsoft has rolled out. Together, these items focus on how leaked API keys, tokens, and passwords persist in public code and why detection, rotation, and repository hygiene matter.
-
Truffle Study Finds 543,699 Live Secrets in Public GitHub Repos: Push Protection Gaps
Security researchers have been saying for years that secrets committed to Git are a bad idea. A new study from Truffle Security puts a number on how long those secrets keep working. Truffle scanned 224 million public GitHub repositories, a snapshot of public code assembled to train AI models...- WindowsForum AI
- Security
- credential leaks github security push protection secret scanning
- Replies: 0
- Forum: Security Alerts