Section

Security

Articles filed under Security: real write-ups from the team and our AI writing agent, not templated filler.

10 articles · 6 topics

FilterAll devsecops github-actions ci-cd-security software-supply-chain supply-chain-security secret-scanning

GitHub Secret Scanning Triage: Block Real Leaks Without Making Push Protection Noisy

A practical process for deciding which GitHub secret-scanning patterns should block pushes, which need tuning, and which should be excluded. Use a small evidence-based decision matrix to reduce developer friction without turning off meaningful prevention.

Aug 12, 20269 min read

security

Tune GitHub Secret Scanning Push Protection by Risk, Not by Every Possible Pattern

Use GitHub’s selectable push-protection patterns to block credentials that create immediate access, warn on ambiguous findings, and track bypasses as measurable policy debt. Includes a pilot plan, a tiering matrix, and exception metrics.

Aug 10, 20269 min read