DevSecOps·DevSecOps essentials

Secrets

Keep secrets in a manager and rotate them.

Intermediate 10 min read Lesson 3 of 150 Challenge included
What you will be able to do
  • Never commit secrets.
  • Use short-lived credentials.
  • Scan history for leaks.

In plain English

Keep secrets in a manager and rotate them.

  • Never commit secrets.
  • Use short-lived credentials.
  • Scan history for leaks.
secrets.txtText
Use a vault or CI secret store
Rotate after exposure
Scan commits with secret scanners
Your turn

Explain it back

Easy

Answer from memory: What should you do after a secret leaks?

TEXT · starter
Your answer…
Check your understanding before moving on.
Knowledge checkQuestion 1

What should you do after a secret leaks?

Select an answer to continue
Study tools

Make it yours.

Keep a private note for this lesson, then turn the key ideas into flashcards you can revisit.

Sign in to save notes and flashcards.Both are private to your account and stay with your progress.
Sign in
Finished reading?

Lock in what you just learned.

Mark this lesson complete to save your place and move one step closer to the certificate.

Next: IaC scanning
Lesson 3 of 150 · 0% of course