search

awslabs / dynein

DynamoDB CLI written in Rust.
https://github.com/awslabs/dynein
Apache License 2.0
360 stars 37 forks source link

Create a workflow to audit the accidental credential disclosure #206

Closed StoneDot closed 4 months ago

StoneDot commented 4 months ago

As I described in a pull request I created, the developer should use git-secrets to prevent the inadvertent committing of credentials into the repository. Besides, it is preferable if we can detect the accidental disclosure in our CI/CD process.

I found that the trufflehog action is useful to achieve the above detection. We can find the example in aws/elb-doctor.

StoneDot commented 4 months ago

This issue was addressed by #215.