Secrets in GitHub repositories
Original title: Coding Agents Copy Your Secrets to a Hidden File. Thousands Are on GitHub
Apiiro found 2,539 real secrets in 1,994 public GitHub repositories.
Apiiro research found 2,539 real secrets in 1,994 public GitHub repositories: database passwords, cloud keys, API tokens, SSH root logins. Among them: a database vendor’s own admin-level cloud key, a production Azure Postgres password, a Square production token, and the owner password of a medical-records database. 63 organizations.
- 2,539 secrets in 1,994 repositories
- specific examples include database vendor cloud key and Square production token
Impact: secrets in public GitHub repositories
From the original article
Shmulik Cohen and Matan Giladi write: Apiiro research found 2,539 real secrets in 1,994 public GitHub repositories: database passwords, cloud keys, API tokens, SSH root logins. Among them: a database vendor’s own admin-level cloud key, a production Azure Postgres password, a Square production token, and the owner password of a medical-records database. 63 organizations, mostly...
By Dissent · databreaches.net
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.