WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
WeAreDevelopers LIVE • Apr 27, 2023

Stop Committing Your Secrets - GIt Hooks To The Rescue!

Dwayne Mcdaniel

Once an API key enters your Git history, it stays there forever. Discover how pre-commit hooks can automatically block hard-coded secrets before they ever leave your local terminal.

Pause
Mute Enter Fullscreen
#1 about 6 min

Real world incidents of hardcoded credential software leaks

High-profile data breaches showcase how exposed credentials compromise otherwise secure networks.

#2 about 5 min

The mechanics of accidental credential exposure in commits

Fast-paced debugging and temporary test variables inadvertently cause millions of public credential leaks.

#3 about 3 min

Shifting security responsibility into modern developer workflows

Integrating native security checks directly into code repositories addresses the ratio imbalance between engineering and security teams.

#4 about 8 min

How Git architecture fundamentally exposes historical code secrets

Understanding Git's snapshot architecture reveals why reverted secrets remain vulnerable inside the hidden commit tree.

#5 about 4 min

Best practices for ignoring and securely vaulting secrets

Employing environment files and encrypted key stores properly keeps sensitive credentials out of version control.

#6 about 2 min

The pipeline cost of removing leaked git commits

Surgically removing exposed credentials from a shared repository creates complex pipeline and team coordination issues.

#7 about 6 min

Automating local security checks using native Git hooks

Implementing automated pre-commit checks leverages local Git functionality to immediately block insecure commits.

#8 about 4 min

Building a custom bash script to detect secrets

Custom shell scripts utilize regular expressions to efficiently prevent specific credential patterns from entering repositories.

#9 about 6 min

Evaluating open source secret detection tools for developers

Community resources like git-secrets and TruffleHog provide robust automated pre-commit scanning capabilities without heavy deployment overhead.

#10 about 4 min

Preventing credential leaks seamlessly at commit time

Identifying sensitive data locally halts security incidents before they disrupt broader continuous integration environments.

#11 about 7 min

Engaging with open source tech communities through documentation

Contributing documentation and providing non-code support offer valuable entryways for engaging with open source software organizations.

#12 about 8 min

Measuring hook effectiveness and alternative secret management tools

Tracking stopped commits demonstrates enforcement success while universal vault managers streamline broader secret oversight processes.

Matching moments

6:14 min

Introduction to securing secrets in GitOps deployments

Alex Soto Alex Soto · LIVE

1:36 min

Protecting source code repositories and developer credentials

Niels Tanis Niels Tanis · World Congress 2022

1:53 min

Transitioning toward DevSecOps with dynamic scanning and secrets management

Christoph Ruggenthaler · LIVE

2:58 min

Auditing existing codebases with secret scanning risk assessments

Kevin Lewis Kevin Lewis · World Congress 2025

1:58 min

Embedding continuous security practices into standard developer workflows

Kevin Lewis Kevin Lewis · World Congress 2025

1:21 min

Maintaining anonymity and operational security in open source

Johan Hutting Johan Hutting · World Congress 2024

More from WeAreDevelopers LIVE

WeAreDevelopers LIVE - Is CSS Catching Up to Flash? thumbnail
1:03:33
9 days ago

WeAreDevelopers LIVE - Is CSS Catching Up to Flash?

Chris Heilmann, Daniel Cranney, Bramus Van Damme

WeAreDevelopers LIVE - Project Chopin: Make Your Team and Agents Play Along thumbnail
1:21:17
17 days ago

WeAreDevelopers LIVE - Project Chopin: Make Your Team and Agents Play Along

Chris Heilmann, Daniel Cranney, Krzysztof Cieślak

Fake or News - AI Toothbrushes, Carrier Pigeon Tech & Life on Mars - Krzysztof Cieślak thumbnail
4:23
18 days ago

Fake or News - AI Toothbrushes, Carrier Pigeon Tech & Life on Mars - Krzysztof Cieślak

Chris Heilmann, Daniel Cranney

WeAreDevelopers LIVE - Open Source Agent Toolkits thumbnail
1:00:38
23 days ago

WeAreDevelopers LIVE - Open Source Agent Toolkits

Chris Heilmann, Daniel Cranney, Eddie Jaoude

Fake or News - AI Music Detectors, Translating Ancient Languages & Tiny Heads in Teslas - Eddie Jaoude thumbnail
6:16
25 days ago

Fake or News - AI Music Detectors, Translating Ancient Languages & Tiny Heads in Teslas - Eddie Jaoude

Chris Heilmann, Daniel Cranney

Fake or News: AI Agents Hire Each Other, Spider-Man Ads in Cars & RAM Thieves - Marc Plogas thumbnail
5:46
30 days ago

Fake or News: AI Agents Hire Each Other, Spider-Man Ads in Cars & RAM Thieves - Marc Plogas

Chris Heilmann, Daniel Cranney, Marc Plogas

Related videos

Securing Secrets in the GitOps era thumbnail
58:57
LIVE • over 3 years ago

Securing Secrets in the GitOps era

Alex Soto

Best Practices for Using GitHub Secrets thumbnail
36:33
LIVE • about 2 years ago

Best Practices for Using GitHub Secrets

Marcel Lupo

Securing secrets in the GitOps Era thumbnail
58:52
LIVE • over 2 years ago

Securing secrets in the GitOps Era

Davide Imola

Real-World Security for Busy Developers thumbnail
29:50
World Congress 2025 • about 1 year ago

Real-World Security for Busy Developers

Kevin Lewis

Supply Chain Security and the Real World: Lessons From Incidents thumbnail
24:47
World Congress 2025 • about 1 year ago

Supply Chain Security and the Real World: Lessons From Incidents

Adrian Mouat

Why Git Still Matters thumbnail
29:46
World Congress 2026 Europe • 3 months ago

Why Git Still Matters

PJ Hagerty

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.