I wonder what in external secret repo creds.yaml and AWS Workspace Firefox Passwords.csv? The US Cybersecurity and Infrastructure Security Agency CISA left open a GitHub repository named “Private CISA” containing plain text passwords, private keys, tokens, and secrets – with obvious file names like “external secret repo creds.yaml” and “AWS Workspace Firefox Passwords.csv” – for six months. GitGuardian researcher Guillaume Valadon, fresh off a recent talk on Kubernetes secret leaks, found the...
