TLDR Tech / InfoSec
Detecting and Removing Dangerous Secrets on Dev Workstations Before Shai-Hulud Does
This post introduces a workflow for detecting plaintext secrets on developer workstations. The tool utilizes bagel, which functions similarly to TruffleHog but for workstations instead of repos, to scan workstations for secrets and output a JSON containing the location and criticality. fleet then uses osquery to determine if the most recent bagel run succeeded and notifies the developer via Slack if it had any findings.
Read the full story