GitHub has enabled API token leak protection by default.
GitHub has announced the default implementation of a mechanism to protect against the accidental inclusion of sensitive data in public repositories, which developers may leave in the code. For example, configuration files containing database passwords, tokens, or API access keys sometimes end up in the repository. Previously, scanning was conducted in passive mode, allowing for the detection of leaks that had already occurred, which fell […]
