Bulletproof Shoes
summary
Slack builds an automated token nuker that scans GitHub and GitHub credential alerts, hashes and caches matches, then calls Slack’s revoke endpoint and posts incidents into a security channel. The system nukes about 400 tokens per month, finds ~80% of regex hits are valid, and one team had 19 separate leaks. Integration with GitHub credential alerts makes detection much faster than search alone, and emails and channel records help coordinate remediation.
AI-written summary · about
chapters (4)
related talks
39mApisecure, 14 & 15 March 2023 - Jose Palafox, Director of Business Development at GitHub.
31mExploiting Leaked Credentials - How python code is leaking millions of secrets
36mGithub Actions Security Landscape
17mPreventing unauth'd credential access on GitHub using AWS services
49mProtect Your Code with GitHub Security Features
43mSlack Hackers Slackers
28mSlack App Security: Securing Your Workspaces From a Bot Uprising
45mHow Leading Companies Are Scaling Their Security