Skip to content
Navigation menu
Search
Powered by Algolia
Search
Log in
Create account
DEV Community
Close
#
secrets
Follow
Hide
Posts
Left menu
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
Right menu
Secure, Lightweight Secret Management for Node.js Without Heavy External Vaults
Pavel Kostromin
Pavel Kostromin
Pavel Kostromin
Follow
Nov 14
Secure, Lightweight Secret Management for Node.js Without Heavy External Vaults
#
node
#
security
#
encryption
#
secrets
1
 reaction
Comments
Add Comment
6 min read
Moderation
Secrets in AI prompts: did the AI leak my password?
System Design Simple
System Design Simple
System Design Simple
Follow
Nov 13
Secrets in AI prompts: did the AI leak my password?
#
aisystems
#
systemdesign
#
secrets
#
personaldata
Comments
Add Comment
9 min read
Moderation
Claude Code's 'Don't ask again' file is leaking tokens into Git repos
Leo
Leo
Leo
Follow
Nov 12
Claude Code's 'Don't ask again' file is leaking tokens into Git repos
#
secrets
#
secretscanning
#
aiagents
#
claudecode
1
 reaction
Comments
1
 comment
3 min read
Moderation
Rotate a leaked API key without stopping your services: dotvault hands out the new value first
uehara
uehara
uehara
Follow
Nov 9
Rotate a leaked API key without stopping your services: dotvault hands out the new value first
#
dotvault
#
secrets
#
devops
#
security
Comments
Add Comment
18 min read
Moderation
Separating Secrets from Config: Best Practices for Secure .env File Management in Private Repositories
Marina Kovalchuk
Marina Kovalchuk
Marina Kovalchuk
Follow
Nov 8
Separating Secrets from Config: Best Practices for Secure .env File Management in Private Repositories
#
security
#
config
#
secrets
#
compliance
Comments
Add Comment
10 min read
Moderation
Real secrets sit inside 1,122 Claude Code files on GitHub
AI Ferryman Alex
AI Ferryman Alex
AI Ferryman Alex
Follow
Nov 8
Real secrets sit inside 1,122 Claude Code files on GitHub
#
claudecode
#
github
#
secrets
#
aisecurity
Comments
Add Comment
7 min read
Moderation
Who revoked that token? Reading the dotvault audit log
uehara
uehara
uehara
Follow
Nov 8
Who revoked that token? Reading the dotvault audit log
#
dotvault
#
secrets
#
devops
#
security
Comments
Add Comment
7 min read
Moderation
Pasting .env into Claude Code? Give the agent one dotvault service token instead
uehara
uehara
uehara
Follow
Nov 7
Pasting .env into Claude Code? Give the agent one dotvault service token instead
#
dotvault
#
secrets
#
claudecode
#
ai
Comments
Add Comment
9 min read
Moderation
GitHub will block pull_request_target in public repos from December 2
Leo
Leo
Leo
Follow
Nov 3
GitHub will block pull_request_target in public repos from December 2
#
githubactions
#
pullrequesttarget
#
supplychainsecurity
#
secrets
2
 reactions
Comments
Add Comment
4 min read
Moderation
2,100 AI Servers Are Leaking GPU Telemetry, and the CVE Is the Boring Part
Jason Miller
Jason Miller
Jason Miller
Follow
Oct 29
2,100 AI Servers Are Leaking GPU Telemetry, and the CVE Is the Boring Part
#
apiauth
#
dast
#
secrets
#
aiagents
Comments
Add Comment
3 min read
Moderation
The agent renamed the environment variable in code, but CI still held the old secret name
Jeff
Jeff
Jeff
Follow
Oct 28
The agent renamed the environment variable in code, but CI still held the old secret name
#
aiagents
#
configuration
#
deployment
#
secrets
Comments
Add Comment
2 min read
Moderation
The Agents Have Now Found Your Secrets On GitHub: ARTEX Is Abusing Public Secrets Right Now
Dwayne McDaniel
Dwayne McDaniel
Dwayne McDaniel
Follow
for
GitGuardian
Nov 10
The Agents Have Now Found Your Secrets On GitHub: ARTEX Is Abusing Public Secrets Right Now
#
security
#
github
#
ai
#
secrets
Comments
1
 comment
8 min read
Moderation
The agent added debug logging and wrote the Authorization header to plaintext logs
Jeff
Jeff
Jeff
Follow
Oct 27
The agent added debug logging and wrote the Authorization header to plaintext logs
#
aiagents
#
security
#
logging
#
secrets
Comments
Add Comment
1 min read
Moderation
GhostAction used about 1,900 stolen GitHub logins to plant secret-stealing workflows in 30,000 repos
Leo
Leo
Leo
Follow
Oct 27
GhostAction used about 1,900 stolen GitHub logins to plant secret-stealing workflows in 30,000 repos
#
githubactions
#
supplychain
#
secrets
#
incident
Comments
Add Comment
3 min read
Moderation
Invite by email, grant one environment, shut a leaver out in 60 seconds: roles and teams in dotvault
uehara
uehara
uehara
Follow
Nov 10
Invite by email, grant one environment, shut a leaver out in 60 seconds: roles and teams in dotvault
#
dotvault
#
secrets
#
devops
#
security
Comments
Add Comment
15 min read
Moderation
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
We're a place where coders share, stay up-to-date and grow their careers.
Log in
Create account