DEV Community

#secrets

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
One dotvault pull, the same .env everywhere: laptop, CI, cloud dev environments
uehara profile

One dotvault pull, the same .env everywhere: laptop, CI, cloud dev environments

#dotvault #secrets #devops #cli
Comments
14 min read
Vercel wants static credentials gone. Its own GitHub Actions deploy still needs one
leobaniak profile
Leo

Vercel wants static credentials gone. Its own GitHub Actions deploy still needs one

#oidc #secrets #vercel #githubactions
Comments
4 min read
Put Your AI Agent's Permissions in Postgres, Not the Prompt
secbyjasonmiller profile

Put Your AI Agent's Permissions in Postgres, Not the Prompt

#apiauth #secrets #soc2 #aiagents
Comments
3 min read
Credential Layer Security Explained: Scope and Controls
dwayne_mcdaniel profile

Credential Layer Security Explained: Scope and Controls

#security #devsecops #appsec #secrets
3
Comments 1
17 min read
Stop panic-grepping your lockfile after an npm compromise alert
secbyjasonmiller profile

Stop panic-grepping your lockfile after an npm compromise alert

#supplychain #secrets
Comments
3 min read
I found a live API key in a repo I cloned last month. Check yours.
lixingliangsy profile

I found a live API key in a repo I cloned last month. Check yours.

#security #devops #compliance #secrets
Comments
4 min read
Your LLM API Keys Are Cash. The METR Breach Proves It.
secbyjasonmiller profile

Your LLM API Keys Are Cash. The METR Breach Proves It.

#apiauth #secrets #aiagents
Comments
3 min read
Same Extension ID, Different Publisher: What Actually Installs When Your Team Moves to Cursor
secbyjasonmiller profile

Same Extension ID, Different Publisher: What Actually Installs When Your Team Moves to Cursor

#supplychain #secrets #aiagents
Comments
3 min read
Infisical duplicate secrets: which copy is live? Check before you delete
iam-tech profile

Infisical duplicate secrets: which copy is live? Check before you delete

#homelab #security #infisical #secrets
Comments
5 min read
Rust `env!()` Macro Exposes API Keys in Compiled Binaries: Secure Secret Management Required
denlava profile

Rust `env!()` Macro Exposes API Keys in Compiled Binaries: Secure Secret Management Required

#security #rust #secrets #binaries
Comments
11 min read
The npm Worm Era: Why Package Signatures Did Not Stop Shai-Hulud
onaeiuspkz profile

The npm Worm Era: Why Package Signatures Did Not Stop Shai-Hulud

#supplychain #npm #cicd #secrets
Comments
3 min read
The new Shai-Hulud worm scans 469 credential paths. The number that should worry you is 189.
secbyjasonmiller profile

The new Shai-Hulud worm scans 469 credential paths. The number that should worry you is 189.

#supplychain #secrets #aiagents
Comments
3 min read
Protecting access tokens on developer workstations: the attack path that skips your CI controls
jeffreyciend profile

Protecting access tokens on developer workstations: the attack path that skips your CI controls

#secrets #endpoint #developertools
Comments
3 min read
Patching Elementor Pro doesn't remove the webshell. Check before you close the ticket.
secbyjasonmiller profile

Patching Elementor Pro doesn't remove the webshell. Check before you close the ticket.

#supplychain #secrets
Comments
3 min read
Sharing environment variables securely with your team: what dotvault is, and where this series takes you
uehara profile

Sharing environment variables securely with your team: what dotvault is, and where this series takes you

#dotvault #secrets #devops #cli
Comments
9 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.