Stop Committing Your Secrets - Git Hooks To The Rescue!
summary
Claim: stop secrets before they reach remote repos by running scanners in Git hooks. Evidence: a report finds 10 million secrets in GitHub public repos last year. Tools shown and usable today include GG Shield, get-secrets, trufflehog and the pre-commit framework tied into pre-commit/pre-receive hooks. Demoed setup is three commands to install, authenticate and enable a global hook; it blocks the commit locally and prevents surgical history rewrites because the secret never reaches the remote.
AI-written summary · about
chapters (8)
- 0:00Introduction and welcome
- 1:25The problem with secrets in Git
- 3:31Why Git hooks are the solution
- 6:02How Git hooks work
- 8:09Open source tools for Git hooks
- 9:14Demo of GG Shield in action
- 10:16Conclusion and key takeaways
- 10:57Q&A on enforcement and tools
related talks
15mStop Committing Your Secrets - Git Hooks To The Rescue!
48mHow Source Code is Revealing our Secrets
35mGit those secrets out your repos!
15mPreventing Accidental Secret Commits with Gitleaks
31mExploiting Leaked Credentials - How python code is leaking millions of secrets
24mHow to Stop Storing Secrets in Git and Start Using [tools]
30mOops! I Committed My Password To GitHub!
29m100,000 Different Ways to Manage Secrets in GitOps