Category: Software, github, automation, machine-learning, artificial-intelligence

Sometimes good things come with bad side effects. Take secrets in our code such as passwords, credentials, keys, and access tokens.

Launched at AWS’ annual re:Invent user conference last month, this automated code reviews scans and profiles your Java and Python applications for hard-coded secrets. Specifically, this automated tool detects such secrets in source code or configuration files as passwords, API keys, SSH keys, and access tokens.

It sounds good, but there you are, hours, days, or weeks later, when you discover that a forgotten secret is now being exploited.

Related Articles