Checklist · Response
Leaked secret: what to do first
A password, API key or token has been committed, pasted or logged where it should not be.
Owner: Whoever found it, then the secret ownerTime: 30 to 60 min
Immediately
Find out if it was used
Clean up
Stop it happening again
Adjust it to your environment before relying on it. A finished list shows a routine was followed; it does not guarantee nothing was missed.
Prêt à aller
au-delà du GRC classique ?
Essai gratuit de 14 jours. Sans carte bancaire. Cloud ou on-premises.