unkeyed / unkey

Open source API management platform
https://go.unkey.com
Other
2.55k stars 244 forks source link

Integrate with Github Secret Scanning Partner Program #809

Open domeccleston opened 5 months ago

domeccleston commented 5 months ago

Preliminary Checks

Is your feature request related to a problem? Please describe.

Sometimes users accidentally check secrets in to version control, making them publicly accessible.

Describe the solution

Github offer a secret scanning partner program that allows regex-based detection of API keys that are checked in to version control. If we add a unique identifier to all Unkey-created API keys, we can make use of this partner program to automatically detect when users check secrets in and notify them, while instantly disabling the API key.

Describe alternatives you have considered (if any)

No response

Additional context

No response

linear[bot] commented 5 months ago

ENG-442 Integrate with Github Secret Scanning Partner Program