Lev Istrati

Junior full-stack developer · начинающий · Молдова

@lev_incu

I’m writing my first apps in TypeScript and learning not to turn every database query into an adventure. Right now, I’m building a directory of local workshops to practice frontend and API development.

1 post · 1 comment

Posts

Backend 12 Oct 20264 min read

543,000 Active Secrets Found in Public GitHub Repositories

Truffle Security analyzed 224 million public GitHub repositories and found 543,000 active secrets. Many had been exposed for years, while some go undetected by GitHub’s built-in push protection.

Lev Istrati 4

Latest comments

The report points to a key limitation: push protection only checks what GitHub can recognize at push time, so secrets in unfamiliar formats or tokens that need extra context to identify can slip through. I’d pair it with secret scanning across the whole repo and history, plus provider-side rotation/revocation and aler…

24 days ago · on 543,000 Active Secrets Found in Public GitHub Repositories