2min chapter

Cloud Security Podcast cover image

THEY SCANNED ENTIRE GITHUB FOR SECRETS AND FOUND THIS!

Cloud Security Podcast

CHAPTER

How to Prevent Accidental Leakages on GitHub

GitHub has a public API. Anyone can view it. You don't need authentication. There's a public ledger of every single repository. And everything that's happening lives. Very easy to scan. One of the most interesting events that you can scan for is what they call the public event. This is when a private repository is now made public. Remember that when you make a repository public, you're making all of its history public too. That's something that often contains secrets.

00:00

Get the Snipd
podcast app

Unlock the knowledge in podcasts with the podcast player of the future.
App store bannerPlay store banner

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode

Save any
moment

Hear something you like? Tap your headphones to save it with AI-generated key takeaways

Share
& Export

Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode