Topic

Secret Management

The storage, scoping, rotation and revocation of API keys, tokens, private keys and other machine credentials.

Current clusters

GitHub puts revoking a leaked secret ahead of scrubbing the repository

GitHub's remediation tutorial treats a committed credential as compromised the moment it is exposed. It says automated scanners find publicly exposed secrets in minutes and attackers can use them within hours.

Publishers:docs.github.com

Reality

Evidence62
Adoption: Insufficient
Hype gap+12
Incentives58
Confidence64