Secret Sprawl - How to stay secure when manipulating credentials

This presentation discusses how a radical shift in software development towards an architecture of distributed services (such as microservices, SaaS applications, Cloud Infrastructure, etc), has created a new security threat called secret sprawl, the unwanted distribution of digital credentials. We will use public data to illustrate the scale of secret sprawl, in particular within public git repositories, and then provide developers with concrete and actionable information including how they can prevent accidentally leaking sensitive information and what to do if they do leak secrets.