Glossary
Secret scanning
Automated detection of credentials (API keys, passwords, tokens) in code, configuration and history before or after they are committed.
Scanners such as Gitleaks and TruffleHog match known key formats and high-entropy strings in repositories, pull requests and CI pipelines. They miss credentials that do not look like keys, for example a password typed inside a shell command, which is why agent configuration files need dedicated rules. Effective programmes scan git history as well as the current tree and rotate anything found rather than just deleting it.
Related terms
AgentAgent harnessNon-human identity
Get the brief in your inbox
One email every morning: the stories that mattered in AI, each with a one-line "why it matters" for your role. Free, no ads, unsubscribe any time.
Published daily by AI Briefing. We never share your address.