GitHub boosts secrets scanning: A necessary step, but supply chain security is key to managing risk

Credentials leaks are a major threat to supply chain security. In the hands of an adversary, application development secrets will open the door to a host of attack strategies. The CircleCI hack made this crystal clear for software supply chain risk management. 

Many potential leaks can be discovered through scanning software repositories. GitHub recognized that earlier this year when it began offering secrets scanning free on the public repositories that it hosts. But scanning can create its own problems, especially …

adversary application application development attack circleci clear credentials crystal development door github hack host key leaks major management risk risk management scanning secrets secrets scanning security software software supply chain software supply chain risk strategies supply supply chain supply chain risk supply chain risk management supply chain security threat