https://nalar.dev/tags/secure-development/ Recent content in Secure Development on Nalar Hugo en-us Tue, 08 Sep 2026 00:00:00 +0700 https://nalar.dev/stop-secrets-before-they-enter-version-control/ Tue, 08 Sep 2026 00:00:00 +0700 https://nalar.dev/stop-secrets-before-they-enter-version-control/ <p>A developer can remove an API key from the latest version of a file and still leave the key in version-control history. Once a real credential has been committed, deleting the visible line is therefore not enough: copies may remain in earlier commits, clones, caches, mirrors, build systems, or other places that observed the repository.</p> <p>This makes secret leakage a good problem to stop early. Instead of relying only on a later scan that reports credentials after they have entered repository history, a team can inspect changes at the boundary where they are about to be accepted and block likely secrets before that happens.</p>