GitGuardian CEO on what to tell a CEO about leaked credentials
Fourrier says deleting a leaked commit does not revoke the key, and leaders should measure time to revocation.
Stories per day · 30 days
2 RSS
Relatedcredentials1devsecops1disclosure1github1gitleaks1leaked-credentials1secrets-detection1secrets-management1trufflehog1
9 stories, newest first · one card per story
Stories tagged #gitguardian
10 Best Secrets Detection Tools Compared (2026): Features & Pricing
A 2026 comparison ranks ten secrets-detection tools, from GitGuardian and TruffleHog to free GitHub and Gitleaks scanning.
8
GhostAction Supply Chain Campaign Uses Malicious GitHub Actions to Steal CI/CD Credentials
GhostAction hit 772 GitHub repositories with malicious Actions workflows that stole CI/CD secrets.
3
Top 10 Best Secrets Detection Tools in 2026 [Ranked & Scored]
A 2026 ranking of secrets-detection tools puts GitGuardian first, then TruffleHog and GitHub.
4
Hackers Abuse GitHub Actions to Steal SSH Keys, Cloud Credentials and Access Tokens
GhostAction abused GitHub Actions workflows to steal SSH keys and cloud credentials from public repositories.
8
The Credential Layer Is Expanding Faster Than Security Teams Can See It
GitGuardian says secrets sprawl is outpacing visibility as commits, agents, and leaked AI credentials multiply.
3
Secrets Sprawl Is an Identity Problem That AI Just Made Impossible to Ignore
GitGuardian finds AI-assisted commits leak secrets about twice as often as human-written code.
4
Hundreds of Leaked GitHub App Keys Still Authenticate
GitGuardian found 474 leaked GitHub App private keys still authenticate, some with organization admin rights.
2
Product showcase: GitGuardian Honeytoken catches credential theft as it happens
GitGuardian now deploys honeytoken decoy AWS credentials across developer fleets via MDM, generating high-fidelity alerts when infostealers test stolen credentials.
3