Security Zines is a comic strip focused on raising awareness around code security topics. This first installment takes a look at the problem of storing secrets in Git repositories, and why it's such...

Everyone has secrets leakage incidents from time to time, even massive players like GitHub. This is a good reminder we all need to stay vigilant and embrace the right tools to help us stay safe.

We're happy to present you our Secrets Management Maturity Model, a model to help your organization make sense of its actual posture and how to improve it.

He struck again! New Security Zine, this time focusing on how leaked Jenkins credentials can lead to a complete supply chain takeover...

Dropbox has confirmed they suffered a data breach involving a bad actor gaining access to credentials, data, and other secrets inside their internal GitHub code repositories.

Learn More About Secrets Detection ✔️ Remediate sensitive data leaks such as API keys ✔️ Secret Sprawl and Application Security

Continuing our series about potential attack scenarios, learn how a very easy configuration mistake on GitHub can lead to a major security breach.

Security Zines is a comic strip focused on raising awareness around code security topics. This first installment takes a look at the problem of storing secrets in Git repositories, and why it's such...

A blog for developers, Application Security and other cybersecurity professionals to learn about secrets in source code, API security, IaC and DevSecOps.

With great power comes great responsibility - and that's not just for superheroes. It's also true for your code!

He struck again! New Security Zine, this time focusing on how leaked Jenkins credentials can lead to a complete supply chain takeover...

In today's digital landscape, the issue of compromised credentials has become a major concern. Discover how renowned companies like Microsoft, VMware, and Sourcegraph were recently confronted with...

In this final part, we'll discuss more software supply chain security frameworks and the critical role of secrets detection in them. We'll explore the NIST SSDF, SLSA, and OSC&R frameworks and how...

The Indian government was breached in a significant attack launched by a white hat hacking group Sakura Samurai leading to a 34 page vulnerability report. Today we will analyze the attack play by...

This report delves into the critical need for integrating security measures directly into the SDLC.

Discover essential Docker Security Best Practices for DevOps engineers and security professionals. Cheat sheet included for quick implementation!

In his latest stroke of genius, Rohit shows us how gghsield fits into the development cycle to shield your code from leaking secrets.

Our latest report gathered answers from 507 IT and security decision-makers to study awareness about the risks posed by secrets sprawl and operational maturity in large enterprises.

This video analyzes how white hat hacking group Sakura Samurai was able to breach multiple organizations within the Indian Government. Each step the hackers ...

GitGuardian now supports Supabase JWT secrets and Service Role JWT secrets. Keep your code secrets free.

Security Zines are back, this time to illustrate the concept and usage behind canary tokens, a powerful intrusion detection trick. Check it out, we've got something for you!

On Thursday, September 15th, Uber confirmed reports of an organization-wide cybersecurity breach. This is an evolving situation, but we will bring you here the latest information and commentary as we...

Security Zines are back, this time to illustrate the concept and usage behind canary tokens, a powerful intrusion detection trick. Check it out, we've got something for you!

In this episode, we go on a deep dive with Billy Lynch from Chainguard into application and code signing and how it can be used to ensure the supply chain is...

After CircleCI breach, it is a good moment for any team relying on CI/CD infrastructure to review their pipeline security as there are some steps they can take to be proactive.

Come away with a game plan for strengthening your information security program.

Mark Bichon from Bearer, the SAST solution for mapping sensitive data flows, shares some essential tips to create security policies that don't feel like a development slowdown.

GitGuardian now supports more than 300 secrets detectors, available in both products: Public GitHub Monitoring and Internal Repositories Monitoring.

The field of AppSec is constantly evolving. Keeping up with the latest tools and trends on social media can instantly flood your newsfeed. That’s why we’ve tapped on our research team to assist.

Learn how to set up an AWS EKS cluster with Terraform and leverage best practices to configure roles, service accounts, logging, and auditing with useful tools.

This year at DEFCON and Black Hat—the world's largest security and hacking conferences—many talks focused on how attackers target developers' accounts. Here are the key points.

Everyone has secrets leakage incidents from time to time, even massive players like GitHub. This is a good reminder we all need to stay vigilant and embrace the right tools to help us stay safe.

DevSecOps is a term that is becoming increasingly popular in the world of software development, and it is quickly becoming the preferred…

How to achieve Control Plane security, true resource separation with network policies, and use Kubernetes Secrets more securely.

In this episode of the Security Repo we dive into intent-based access control. This is the concept of limiting access to just what is intended, it sounds sim...

GitGuardian has just launched on the GitHub Marketplace, and to top it all off, we are ranking 1st in the Security Category.

Application security can only improve if developers code securely or remediate existing flaws — unfortunately, many developers don’t receive training with proper security know-how.

Discover how honeytokens, digital decoys designed to detect unauthorized access, can strengthen the security of your CI/CD pipelines. In this guide, we offer step-by-step instructions for integrating...

Resolve incidents faster by integrating your favorite DevOps and ITOps tools—including APM, collaboration, error tracking, and monitoring tools—with PagerDuty. We have over 370 native integrations to...

💥 𝗖𝗶𝗿𝗰𝗹𝗲𝗖𝗜 𝗱𝗶𝘀𝗰𝗹𝗼𝘀𝗲𝗱 𝗮 𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗶𝗻𝗰𝗶𝗱𝗲𝗻𝘁 𝘆𝗲𝘀𝘁𝗲𝗿𝗱𝗮𝘆 ICYMI, the CI/CD platform, is investigating a security incident…

We have compiled a list of some of the best practices to prevent API key leakage and keep secrets and credentials safe. Secrets management doesn’t have a one-size-fits-all approach, so this list...

Docker can be a blind spot for security, in this video we look at leaked credentials inside docker images. We evaluate how leaked secrets like API keys and c...

GitOps is an evolution of infrastructure as code, a framework that can drastically improve deployment speed and developer efficiency. Here we run through exactly what GitOps is and how to practically...

Both APIs and microservices play a key role in cloud native environments. Microservices serve as the cornerstone of distributed and shared computing resources. At the same time, APIs serve as a very...

Where the world gathers

In this tutorial, we will show how to integrate GitGuardian Shield to run on one of the most famous CI tools: Jenkins (with a cool bonus!).