Posted inSecurity
Hunting Leaked Secrets: Using TruffleHog to Secure Your Git History
Accidentally committed an API key? Learn how to use TruffleHog to scan your Git history, verify if secrets are still active, and remove them permanently.
Posted inDevOps
Managing Git Secrets Safely with Mozilla SOPS and Age: A Lightweight HashiCorp Vault Alternative
Mozilla SOPS combined with Age lets you store encrypted secrets directly in Git — version-controlled and diff-able — without running a secrets management server. This guide covers installation, team setup, CI/CD integration, and key rotation for a lightweight alternative to HashiCorp Vault.