Find Annoying Secrets in Your AWS Java and Python Programs

3 years ago thenewstack.io

Summary: This is a summary of an article originally published by The New Stack. Read the full original article here →

Sometimes good things come with bad side effects. Take secrets in our code such as passwords, credentials, keys, and access tokens.

Launched at AWS’ annual re:Invent user conference last month, this automated code reviews scans and profiles your Java and Python applications for hard-coded secrets. Specifically, this automated tool detects such secrets in source code or configuration files as passwords, API keys, SSH keys, and access tokens.

It sounds good, but there you are, hours, days, or weeks later, when you discover that a forgotten secret is now being exploited.

DevOps Articles