• Top
  • New

Surviving the GitHub OAuth hack – remediating thousands of hardcoded credentials

by lumberjack24 on 4/21/2022, 1:46:33 PM with 1 comments
While going through other HN threads, I noticed many participants in the discussions recommend that organizations noticing suspicious repo cloning activity start scanning source code for credentials. This is a great advice to limit the damage.

But where do you start when you find thousands of secrets exposed?

  • by lumberjack24 on 4/21/2022, 1:49:57 PM

    The other day I wrote a guide to help security and engineering teams prioritize and remediate thousands of such incidents. Hope it helps!

    https://blog.gitguardian.com/a-practical-guide-to-prioritize...