Công cụ quét mã nguồn bí mật mã nguồn mở vừa được cập nhật, bổ sung phát hiện JWT và tùy chỉnh chính sách qua file .secrets-policy.json. Giao diện CLI cũng được cải thiện, hỗ trợ SARIF và chế độ baseline. Hoàn toàn hoạt động offline, không thu thập dữ liệu!
#secretsmanager #opensource #security #privacy #quétmã #bảomật #mãnguồn

https://www.reddit.com/r/selfhosted/comments/1oqglzt/update_added_jwt_detection_policy_config_to_my/

<s>because it's much safer, we have to give all our secrets to an almighty service. it has promised to be free of bugs and it will only hand out the secrets for legitimate reasons</s>

🤦🏻‍♂️ i continue tp be amazed by how our profession collectively dropped any logical thinking

#aws #secretsmanager #awssecrets

I am suffering from decision paralysis, because I have no idea if I should use #SOPS for my secrets or if it will be a better idea to use #ExternalSecrets with #Bitwarden #SecretsManager…
Any #DevOps engineers that are kind enough to help with advice?

#k8s #k3s #kubernetes #BitwardenSM #BitwardenSecretsManager

PSA:
#Ansible + @bitwarden #SecretsManager integration isn't particularly likely to work for anyone who wants to pull secrets during loops, or template out two #secrets in one file.

https://github.com/bitwarden/sdk/pull/676
Fix has been written, but not yet released.

Its unclear (to me) when the next #bitwarden #SDK release will be so at present not sure when we might be back in luck .

Secrets Managerをアカウント間で同期する
https://qiita.com/tatsu0209/items/c3e3f5156a75343eab33?utm_campaign=popular_items&utm_medium=feed&utm_source=popular_items

#qiita #AWS #lambda #SecretsManager #EventBrdge

Security and simplicity should go hand-in-hand, according to respondents of the 2024 Bitwarden developer survey. Learn more about the driving factors behind #developer security practices: https://bitwarden.com/resources/security-survey-developer-secrets-and-the-future-of-passkeys/

#secretsmanager #secretsmanagement #datasecurity #cybersecurity

This 2024 Bitwarden survey uncovered an overconfidence gap in which #developers recognize a need for continuous security training, yet continue to manage secrets in unsecure ways. Read the other interesting findings: https://bitwarden.com/resources/security-survey-developer-secrets-and-the-future-of-passkeys/

#developer #cybersecurity #datasecurity #secretsmanager

Although developers overwhelmingly agree that ‘secure-by-design’ principles are important, tight deadlines and understaffing create barriers to implementing best practices. Read more about these 2024 developer survey findings: https://bitwarden.com/resources/security-survey-developer-secrets-and-the-future-of-passkeys/

#cybersecurity #passwordmanager #developer #security #secretsmanager

Securely manage access to your organization’s infrastructure secrets with Bitwarden Secrets Manager. https://bitwarden.com/products/secrets-manager/

#secretsmanager #cybersecurity #security #datasecurity #devops

Number of times I've been bitten by the #aws #secretsmanager bug where if you use "-secret" at the end of the key, it tries to search on that as an ID rather than the name: too many to count, but add one more.

🎉 Introducing VMware Secrets Manager; The Next Step for Aegis!
»» https://www.zerotohero.dev/vmware-secrets-manager/ ««

I am thrilled to share an update with all of you. Aegis has transformed and landed into its new home! It is now entering a phase as VMware Secrets Manager for Cloud Native workloads!

#ZeroTrust #security #VMware #SecretsManager #secrets #spiffe #SPIRE

🎉 Introducing VMware Secrets Manager; The Next Step for Aegis!
»» https://www.zerotohero.dev/vmware-secrets-manager/ ««

I am thrilled to share an update with all of you. Aegis has transformed and landed into its new home! It is now entering a phase as VMware Secrets Manager for Cloud Native workloads!

#ZeroTrust #security #VMware #SecretsManager #secrets #spiffe #SPIRE

Protect your sensitive information with end-to-end encryption and enjoy the benefits of a centralized, secure #secretsmanagement solution. Get started today: https://bitwarden.com/products/secrets-manager/

#cybersecurity #security #datasecurity #secretsmanager

@portainerio Hi there! Any plans in the future to support upcoming @bitwarden #secretsmanager

Tnx!

Get an introduction to the secrets management industry and the #developer challenges that shaped it in this quick guide: https://bitwarden.com/resources/presentations/a-quick-guide-to-secrets-management/

#cybersecurity #security #datasecurity #secretsmanager

Upon prompting from my buddy at GH, wanted to check out #Github Access using #OpenID Connect (OIDC). Today, I covered setting up federated #OIDC to #Azure, #AWS and #GCP. In all three cases, I tackled secrets using #AKV, #ParameterStore and #SecretsManager, respectively. The key feature of OIDC is the use of OAuth flow; meaning no persisted Access Secret needs to be in your #CI for #Cloud access. https://freshbrewed.science/2023/02/09/gh-secrets.html