GitGuardian: The Credential Layer Security Platform, helping enterprises close credential-based breach paths. Website: gitguardian.com Blog: blog.gitguardian.com Free GH audit: s.gitguardian.com/free-audithttps://bsky.app/profile/gitguardian.comhttps://bsky.app/profile/gitguardian.com/post/3mo3qmdhsv22xA historical scan can surface hundreds or thousands of incidents at once. GitGuardian's incident table is built to answer what to work on first: verified validity, automated severity scoring across 24 rule sets, and saved filtered views. youtu.be/Fhj83rW1lOQ https://youtu.be/Fhj83rW1lOQ12 Jun 2026 12:30 +0000at://did:plc:vp7sdwxtge3xj2dtowoedctm/app.bsky.feed.post/3mo3qmdhsv22xhttps://bsky.app/profile/gitguardian.com/post/3mnwo5dwarc2rggshield can plant honey tokens directly from your terminal. Decoy AWS keys that look real, grant no access, and alert you the moment someone tries to use them. Trip wires for your codebase. youtu.be/UsLGa44CugM https://youtu.be/UsLGa44CugM10 Jun 2026 12:03 +0000at://did:plc:vp7sdwxtge3xj2dtowoedctm/app.bsky.feed.post/3mnwo5dwarc2rhttps://bsky.app/profile/gitguardian.com/post/3mnufigmunc2rGitGuardian now scans Gerrit. Full historical scan on connect, real-time scanning on every new commit and comment. Findings land in the same dashboard as your GitHub, GitLab, and Bitbucket incidents. youtu.be/q1XzY6HvxAI https://youtu.be/q1XzY6HvxAI09 Jun 2026 14:22 +0000at://did:plc:vp7sdwxtge3xj2dtowoedctm/app.bsky.feed.post/3mnufigmunc2rhttps://bsky.app/profile/gitguardian.com/post/3mnrmxbgcgc2nAI coding assistants read files, run commands, and call tools. ggshield AI hooks scan at each of those points and block secrets before they reach prompts, logs, or generated code. One install command. Works with Cursor, Claude Code, and Copilot. youtu.be/he0Ynu32puQ https://youtu.be/he0Ynu32puQ08 Jun 2026 11:58 +0000at://did:plc:vp7sdwxtge3xj2dtowoedctm/app.bsky.feed.post/3mnrmxbgcgc2nhttps://bsky.app/profile/gitguardian.com/post/3mnkcmfh33s2qGitGuardian's updated search bar lets you triage incidents by pasting a secret value, typing an author email, a file path, or plain language like "open critical unassigned cloud incidents." Available now on every plan. youtu.be/LSrBUCvJaLM https://youtu.be/LSrBUCvJaLM05 Jun 2026 14:04 +0000at://did:plc:vp7sdwxtge3xj2dtowoedctm/app.bsky.feed.post/3mnkcmfh33s2qhttps://bsky.app/profile/gitguardian.com/post/3mnhsrvnpk22qWhen a breach happens, you need to account for every secret: which were in CI, which were on developer laptops, which processes had access. That inventory is what you show your board. https://youtube.com/shorts/EOrZmlsTsE004 Jun 2026 14:16 +0000at://did:plc:vp7sdwxtge3xj2dtowoedctm/app.bsky.feed.post/3mnhsrvnpk22qhttps://bsky.app/profile/gitguardian.com/post/3mnfspgd2xc2qWhen an LLM hits a security constraint, GitGuardian research shows it often goes around it, silently, and hardcodes the secret. The developer didn't make that call. The model did. https://youtube.com/shorts/999wS_fyBhg03 Jun 2026 19:09 +0000at://did:plc:vp7sdwxtge3xj2dtowoedctm/app.bsky.feed.post/3mnfspgd2xc2qhttps://bsky.app/profile/gitguardian.com/post/3mncoqf3jcc2hGitGuardian's VS Code extension now shows all secret findings in a sidebar panel — across every file, before you commit. Works in Cursor and Windsurf too. Catch it on save, not in CI. youtu.be/d18uYyOhez8 https://youtu.be/d18uYyOhez802 Jun 2026 13:20 +0000at://did:plc:vp7sdwxtge3xj2dtowoedctm/app.bsky.feed.post/3mncoqf3jcc2hhttps://bsky.app/profile/gitguardian.com/post/3mnaggtzlrs2hOne stolen PAT in February. Trivy poisoned March 19. Eight days later: Aqua, Checkmarx, LiteLLM, and Telnyx all compromised because they automatically consumed the update. This is what supply chain cascade looks like. https://youtube.com/shorts/qa-47teRcW801 Jun 2026 15:46 +0000at://did:plc:vp7sdwxtge3xj2dtowoedctm/app.bsky.feed.post/3mnaggtzlrs2hhttps://bsky.app/profile/gitguardian.com/post/3mmylgl2zos2hggshield 1.51: AI hooks now cover Codex alongside #Claude, #ChatGPT, and #Cursor. #MCP server discovery extended to plugin-installed servers. Plus oob (out-of-band) auth, better SLSA provenance, and improved API status. youtu.be/RCIeYF3nkn0 https://youtu.be/RCIeYF3nkn029 May 2026 12:54 +0000at://did:plc:vp7sdwxtge3xj2dtowoedctm/app.bsky.feed.post/3mmylgl2zos2hhttps://bsky.app/profile/gitguardian.com/post/3mmw2fkvcbc2qClaude Code co-authored commits leak secrets at 2.4× the human baseline. Larger commits, more lines, more exposure surface. AI speeds up development — and quietly expands the attack surface. https://youtube.com/shorts/9jEDlkMoVX028 May 2026 12:44 +0000at://did:plc:vp7sdwxtge3xj2dtowoedctm/app.bsky.feed.post/3mmw2fkvcbc2qhttps://bsky.app/profile/gitguardian.com/post/3mmtlkleva22qClaude Code co-authored commits leak secrets at 2.4× the human baseline. Larger commits, more lines, more exposure surface. AI speeds up development — and quietly expands the attack surface. https://youtube.com/shorts/9jEDlkMoVX027 May 2026 13:13 +0000at://did:plc:vp7sdwxtge3xj2dtowoedctm/app.bsky.feed.post/3mmtlkleva22qhttps://bsky.app/profile/gitguardian.com/post/3mmeg6mzwd22qA CISA contractor pushed AWS GovCloud admin keys to a public GitHub repo in November. It sat there for 6 months, after GitGuardian sent 7–10 alerts. No response. Guillaume Valadon walks us through how we escalated this disclosure: youtu.be/mWIgasN3K7Q https://youtu.be/mWIgasN3K7Q21 May 2026 12:27 +0000at://did:plc:vp7sdwxtge3xj2dtowoedctm/app.bsky.feed.post/3mmeg6mzwd22qhttps://bsky.app/profile/gitguardian.com/post/3mmbwkcf5rc2xExploiting a vulnerability targets production. Malware targets the developer. That's not a subtle difference: it's where the credentials live: https://youtube.com/shorts/2-9e4MVy6xM20 May 2026 12:42 +0000at://did:plc:vp7sdwxtge3xj2dtowoedctm/app.bsky.feed.post/3mmbwkcf5rc2xhttps://bsky.app/profile/gitguardian.com/post/3mm4vp6fuzc2375,000 open incidents is normal for GitGuardian customers. A "generic IAM copy" enriched to "Microsoft credential, publicly leaked" = risk score 100. That's ML-powered triage in practice: youtu.be/iyKHvK3g9g8 https://youtu.be/iyKHvK3g9g818 May 2026 12:43 +0000at://did:plc:vp7sdwxtge3xj2dtowoedctm/app.bsky.feed.post/3mm4vp6fuzc23https://bsky.app/profile/gitguardian.com/post/3mlvgsge7dk2xAfter a developer machine compromise: what secrets were exposed, where, and what needs rotation now? GitGuardian Developer Endpoint Protection scans your fleet via MDM and answers all three: youtu.be/IDzSiJQCZZA https://youtu.be/IDzSiJQCZZA15 May 2026 13:28 +0000at://did:plc:vp7sdwxtge3xj2dtowoedctm/app.bsky.feed.post/3mlvgsge7dk2xhttps://bsky.app/profile/gitguardian.com/post/3mlsx2wmuwc2oEvery time a developer pushes a secret to public GitHub, GitGuardian emails them directly. That's the Good Samaritan program. Millions of alerts sent per year: https://youtube.com/shorts/dUzjIpf3FTI14 May 2026 13:41 +0000at://did:plc:vp7sdwxtge3xj2dtowoedctm/app.bsky.feed.post/3mlsx2wmuwc2ohttps://bsky.app/profile/gitguardian.com/post/3mlqegw7r7c2oGerrit is one of the most widely deployed code review platforms in enterprise environments, yet a blind spot for secrets detection. GitGuardian now scans it, historically and in real time: youtu.be/q1XzY6HvxAI https://youtu.be/q1XzY6HvxAI13 May 2026 13:03 +0000at://did:plc:vp7sdwxtge3xj2dtowoedctm/app.bsky.feed.post/3mlqegw7r7c2ohttps://bsky.app/profile/gitguardian.com/post/3mlnrvtkya22f.env files are plain text secrets on a machine that's a supply chain target. ggshield 1.50 moves API tokens to your OS credential store by default and extends AI hooks to the MCP layer. Full breakdown: youtu.be/4c983T8hAyc https://youtu.be/4c983T8hAyc12 May 2026 12:26 +0000at://did:plc:vp7sdwxtge3xj2dtowoedctm/app.bsky.feed.post/3mlnrvtkya22fhttps://bsky.app/profile/gitguardian.com/post/3mllcfz7qg22fCmd+K from anywhere in GitGuardian and jump to incidents, settings, integrations, or docs without leaving your workspace. Context-aware, role-scoped. Small thing, saves real time mid-incident: youtu.be/Jx-RpuMX7ak https://youtu.be/Jx-RpuMX7ak11 May 2026 12:43 +0000at://did:plc:vp7sdwxtge3xj2dtowoedctm/app.bsky.feed.post/3mllcfz7qg22fhttps://bsky.app/profile/gitguardian.com/post/3mldwkmq3nk2rAsk GitGuardian "what are my top 10 public incidents right now?" and it answers. Natural language triage against all your incidents, in-app. Same 23 tools as the MCP server. Full demo: youtu.be/AqVPvAjkGR0 https://youtu.be/AqVPvAjkGR008 May 2026 14:22 +0000at://did:plc:vp7sdwxtge3xj2dtowoedctm/app.bsky.feed.post/3mldwkmq3nk2rhttps://bsky.app/profile/gitguardian.com/post/3mf2tea74ms2490B events/day and we’re still manually doing L1 triage? That’s not resilience, that’s ✨tradition✨. #ChiBrrCon 2026 takeaway: automate the repetitive, keep humans for judgment, and build real inventories. #AppSec #AI https://blog.gitguardian.com/chibrrcon-2026/17 Feb 2026 15:00 +0000at://did:plc:vp7sdwxtge3xj2dtowoedctm/app.bsky.feed.post/3mf2tea74ms24https://bsky.app/profile/gitguardian.com/post/3mdnomx6owk25🤖 Agents don’t log in. They act. At #NHIcon 2026 the message was clear: human-centric IAM breaks in the age of agentic AI. Static roles + long-lived creds = 🚨 risk amplification. Time for identity at the speed of autonomy. 🔐 blog.gitguardian.com/nhicon-2026 https://blog.gitguardian.com/nhicon-202630 Jan 2026 16:05 +0000at://did:plc:vp7sdwxtge3xj2dtowoedctm/app.bsky.feed.post/3mdnomx6owk25https://bsky.app/profile/gitguardian.com/post/3mczhlylcac25Secrets sprawl ≠ developer mistakes. It’s unmanaged machine access at scale. Boards care about downtime, cost, and resilience, and NHIs sit right in the middle. Here’s how to connect the dots 👇 https://blog.gitguardian.com/boards-focus-on-risks-nhi-governance22 Jan 2026 15:06 +0000at://did:plc:vp7sdwxtge3xj2dtowoedctm/app.bsky.feed.post/3mczhlylcac25https://bsky.app/profile/gitguardian.com/post/3mcabxcbmck2fAI agents aren’t your coworkers. They’re over-permissioned bots with access to prod. Stop pretending they’re cute. Start treating them like risks. 🛑 NHI governance now! https://blog.gitguardian.com/what-ai-agents-can-teach-us-about-nhi-governance/12 Jan 2026 14:49 +0000at://did:plc:vp7sdwxtge3xj2dtowoedctm/app.bsky.feed.post/3mcabxcbmck2fhttps://bsky.app/profile/gitguardian.com/post/3mbtxpumhpk2hAI agents are already causing incidents, and identity controls aren’t ready. Jan 27: Join GitGuardian at #NHIcon2026. Talk: “How Agentic AI Helps You Leak Secrets (and What to Do About It)” (1 PM PST, Builders Track) w/ @mdwayne-real.bsky.social Free registration here: https://aembit.io/nhicon?aff=GitGuardian07 Jan 2026 17:14 +0000at://did:plc:vp7sdwxtge3xj2dtowoedctm/app.bsky.feed.post/3mbtxpumhpk2h