Dwayne McDaniel
Stop Committing Your Secrets - GIt Hooks To The Rescue!
#1about 4 minutes
The high cost of accidental secret leaks in code
Major companies like Uber, Toyota, and Samsung have suffered significant breaches due to hard-coded credentials found in source code.
#2about 7 minutes
Why hard-coded secrets are a growing developer problem
The number of secrets exposed in public repositories is growing faster than developer population growth, often due to hurried workflows.
#3about 6 minutes
How Git's design makes committed secrets permanent
Git stores a complete, compressed snapshot of files for every commit, meaning a secret committed once remains in the repository's history forever.
#4about 5 minutes
Why manual secret management is not enough
Relying solely on .gitignore files or vaults is insufficient because human error can lead to accidental commits, which are very difficult to remove from history.
#5about 9 minutes
Automating secret prevention using local Git hooks
Git hooks provide a built-in automation platform to run scripts that can scan for secrets and block commits before they are created.
#6about 5 minutes
Comparing open source tools for secret detection
Several open source tools like AWS Git Secrets, TruffleHog, and GG Shield can be used to implement pre-commit hooks for secret detection.
#7about 2 minutes
Demo of a Git hook blocking a secret commit
A practical demonstration shows how a pre-commit hook (GG Shield) detects hard-coded AWS keys and prevents the commit from completing.
#8about 16 minutes
Key takeaways for preventing secret leaks in code
The best strategy is to avoid committing secrets in the first place by using automation like Git hooks and leveraging open source tools.
Related jobs
Jobs that call for the skills explored in this talk.
aedifion GmbH
Köln, Germany
€30-45K
Intermediate
Network Security
Security Architecture
+1
fulfillmenttools
Köln, Germany
€50-65K
Intermediate
TypeScript
Google Cloud Platform
+1
Matching moments
Featured Partners
Related Videos
36:33Best Practices for Using GitHub Secrets
Marcel Lupo
58:57Securing Secrets in the GitOps era
Alex Soto
29:50Real-World Security for Busy Developers
Kevin Lewis
58:52Securing secrets in the GitOps Era
Davide Imola
44:30Securing Your Web Application Pipeline From Intruders
Milecia McGregor
25:28How GitHub secures open source
Joseph Katsioloudes
24:01What The Hack is Web App Sec?
Jackie
1:04:54Lights, Camera, GitHub Actions!
Ixchel Ruiz
Related Articles
View all articles
From learning to earning
Jobs that call for the skills explored in this talk.
GitLab
Manchester, United Kingdom
£131-282K
API
C++
Gitlab
Burp Suite
+1
GitLab
Glasgow, United Kingdom
£131-282K
API
C++
Gitlab
Burp Suite
+1
GitLab
Charing Cross, United Kingdom
£131-282K
API
C++
Gitlab
Burp Suite
+1
GitLab
Birmingham, United Kingdom
£131-282K
API
C++
Gitlab
Burp Suite
+1
GitLab
Sheffield, United Kingdom
£131-282K
API
C++
Gitlab
Burp Suite
+1
GitLab
£117-252K
Senior
Gitlab
Vue.js
PostgreSQL
Ruby on Rails
GitLab
Bristol, United Kingdom
£131-282K
API
C++
Gitlab
Burp Suite
+1
GitLab
Nottingham, United Kingdom
£131-282K
API
C++
Gitlab
Burp Suite
+1
GitLab
Newcastle upon Tyne, United Kingdom
£131-282K
API
C++
Gitlab
Burp Suite
+1