2 papers
cs.CR2025
RiskHarvester: A Risk-based Tool to Prioritize Secret Removal Efforts in Software Artifacts
Setu Kumar Basak, Tanmay Pardeshi, Bradley Reaves +1
Since 2020, GitGuardian has been detecting checked-in hard-coded secrets in GitHub repositories. During 2020-2023, GitGuardian has observed an upward annual trend and a four-fold i…
cs.CR2024
AssetHarvester: A Static Analysis Tool for Detecting Secret-Asset Pairs in Software Artifacts
Setu Kumar Basak, K. Virgil English, Ken Ogura +3
GitGuardian monitored secrets exposure in public GitHub repositories and reported that developers leaked over 12 million secrets (database and other credentials) in 2023, indicatin…