Topic tag

GitHub

2 articles tagged GitHub. Browse the full archive or jump to all posts.

474 GitHub App Keys Still Work: The Inventory Nobody Can Produce

September 27, 2026 · 11 min read

474 GitHub App Keys Still Work: The Inventory Nobody Can Produce

GitGuardian pulled over 500,000 exposed RSA keys out of public sources and found 474 GitHub App private keys that still authenticated, against 440 distinct Apps. Forty-four had organisation admin. The fix is not a rotation sprint, it is the inventory you cannot currently produce.

Read more →
CISA Left Its Own Passwords on GitHub for Six Months

May 27, 2026 · 16 min read

CISA Left Its Own Passwords on GitHub for Six Months

CISA left AWS GovCloud keys in a public GitHub repo for six months. Then GitHub got breached. What the May 2026 supply-chain failures mean for you.

Read more →