Why secret detection tools are not enough: It’s not just about false positives - An industrial case study
Sign Up to like & getrecommendations! Published in 2022 at "Empirical Software Engineering"
DOI: 10.1007/s10664-021-10109-y
Abstract: Checked-in secrets in version-controlled software projects pose security risks to software and services. Secret detection tools can identify the presence of secrets in the code, commit changesets, and project version control history. As these tools… read more here.
Keywords: detection tools; secret detection; detection; software ... See more keywords