3 papers
cs.HC2025
Extended Version: It Should Be Easy but... New Users Experiences and Challenges with Secret Management Tools
Lorenzo Neil, Deepthi Mungara, Laurie Williams +2
Software developers face risks of leaking their software secrets, such as API keys or passwords, which can result in significant harm. Secret management tools (SMTs), such as Hashi…
cs.CR2025
RiskHarvester: A Risk-based Tool to Prioritize Secret Removal Efforts in Software Artifacts
Setu Kumar Basak, Tanmay Pardeshi, Bradley Reaves +1
Since 2020, GitGuardian has been detecting checked-in hard-coded secrets in GitHub repositories. During 2020-2023, GitGuardian has observed an upward annual trend and a four-fold i…
cs.CR2024
AssetHarvester: A Static Analysis Tool for Detecting Secret-Asset Pairs in Software Artifacts
Setu Kumar Basak, K. Virgil English, Ken Ogura +3
GitGuardian monitored secrets exposure in public GitHub repositories and reported that developers leaked over 12 million secrets (database and other credentials) in 2023, indicatin…