Secrets like API keys, credentials and security certificates are the crown jewels of organizations but can easily sprawl through all your systems. It is important to be able to gain visibility into your systems and code to find these secrets. In this tutorial, we will run through a simple python script to scan for secrets in local files and directories. The same principles can be applied to detect secrets anywhere in your CI/CD pipeline.
Links:
Blog post: https://blog.gitguardian.com/scan-sec...
Example code: https://github.com/mackenziejj/direct...
GitGuardian Dashboard: https://dashboard.gitguardian.com
Open-source dependencies:
python-dotenv: https://pypi.org/project/python-dotenv/
py-gitguardian link: https://github.com/GitGuardian/py-git...