POSIX Shell 기반 Pre-commit Hook으로 Secret 유출 0% 도전
The Pre-Commit Hook That Catches API Keys Before They Hit Git
The Pre-Commit Hook That Catches API Keys Before They Hit Git
How to Stop Leaking AWS Keys to GitHub (And What to Do When You Already Did)
GitHub Expands Secret Scanning with General Availability of MCP Server Integration
I shipped cc-audit as a GitHub Action. Now your CLAUDE.md gets linted on every PR.
4 Open-Source Security Tools Every Dev Should Know
I built a CLI that scans, validates and audits your .env files and it works with any stack
The Case for Secret Validation: Building an Open Source Tool to Reduce Risk
We scanned 1,764 vibe-coded apps. 453 had critical vulnerabilities. Here's what we found beyond Supabase RLS.
Cloudflare and GitHub are building identity systems for AI agents. We're not ready for this.
GitHub for Beginners: Getting started with GitHub security
Hugging Face partners with TruffleHog to Scan for Secrets