Checklist · Response
Leaked secret: what to do first
A password, API key or token has been committed, pasted or logged where it should not be.
Owner: Whoever found it, then the secret ownerTime: 30 to 60 min
Immediately
Find out if it was used
Clean up
Stop it happening again
Adjust it to your environment before relying on it. A finished list shows a routine was followed; it does not guarantee nothing was missed.
Pregătiți să treceți
dincolo de GRC-ul clasic?
14 zile de probă gratuită. Fără card. Cloud sau on-premises.