Topic tag

least privilege

1 article tagged least privilege. Browse the full archive or jump to all posts.

474 GitHub App Keys Still Work: The Inventory Nobody Can Produce

September 27, 2026 · 11 min read

474 GitHub App Keys Still Work: The Inventory Nobody Can Produce

GitGuardian pulled over 500,000 exposed RSA keys out of public sources and found 474 GitHub App private keys that still authenticated, against 440 distinct Apps. Forty-four had organisation admin. The fix is not a rotation sprint, it is the inventory you cannot currently produce.

Read more →