Secret scanning
Automated tools that watch public code for exposed credentials.
Learn it through a story
- The Group Project Repo (Cybersecurity for Juniors 2, Ch 3)
- The Secret That Outlived the Fix (Cybersecurity for Juniors 3, Ch 4)
Related terms
- SBOM Software bill of materials, a complete list of every component a piece of software depends on.
- SCA Software composition analysis, checking third-party dependencies against known vulnerability databases.
- Scareware A scam that claims your device is infected, to frighten you into clicking.
- Secret sprawl Credentials scattered across many places, repos, notes, chats, with no central record of where they all live.
- Secrets manager / vault A system that stores credentials centrally and issues them securely, often with short lifespans.
- Secure SDLC Building security checks into every stage of the software development lifecycle, not bolting them on at the end.