TIL canary token

A false secret token that is monitored for usage to discover whether an account was compromised.
=> time to rotate all secrets stored on that account

Apparently that’s how the 2021 CircleCI security breach was discovered by a CircleCI user.

#devday #devday2024

I'm looking forward on being in Mons Belgium for the DevDay 2024 (https://devday.be), on the 7th of November!

If you're planning on being there make sure to join my session where I'll be talking about OpenSSF Scorecards and how they can be used to review the security of NuGet packages.

You can use the following promo-code to get your ticket with a discount:

https://www.eventbrite.be/e/billets-devday-2024-10-years-776152722687?discount=nielstanis

Hope to see you there!

#DevDay2024 #mvpbuzz