“A day later I get an alert from GitHub… we’re seeing some keys in your code.”

Dan Barahona · The GRC Engineering Club's AntiCheckBox Podcast · AI Agents Will Use Every Permission You Give Them | Guest: Dan Barahona

Play from 12:47
12:47

Audio streams from the publisher’s own feed. Verbatim does not host or copy it.

What was described

Use GitHub's security alerts to automatically detect hard-coded API keys after code is pushed

Said nearby on the same subject

“Or you build security sandboxes where the AI is constrained by hard-coded rules it just cannot override.”
♫
Said on AI & Beyond
How they work Share this moment
“It speeds up the security checks for a secure development lifecycle ... with automated remediation and automated alerts.”
♫
Said on Inside the Strategy Room
Why it worked Share this moment
“…pass keys, also physical security keys like YubiKeys, because again, they are fishing resistant…”
MP
Mike Piper
The Long View ·
“Our system will be able to automatically alert, hey, your license is expiring in 30 days.”
♫
Said on Pharmacy Podcast Network
Automation 30 days Share this moment

Moments like this, every Monday

The strongest new moments on your topics, in the speakers' own words. Free for three topics.

No card. No password. One-click unsubscribe.

Track a competitor?

Pro watches up to 25 names or phrases and emails you the morning after they are said.

See Pro, $29 a month

Verbatim quotes a short extract and links to the episode; the episode belongs to its publisher. Remove a show.