Skip to Main Content
Lightning Talk Intermediate

Securing Opensource Git Repositories: Preventing Accidental Secret Commits with Gitleaks

Proposal status is Rejected
Session Description

Accidentally committing secrets to a Git repository can compromise sensitive data and lead to serious security risks. This talk will focus on addressing this common issue by using Gitleaks, an open-source tool for detecting secrets in code, and demonstrate how developers can seamlessly integrate it into their workflows.

Instead of scrambling to fix the problem after secrets have already been exposed, this session will show you how to catch potential leaks before they happen. Through a live demo, we’ll explore how Harness Open Source provides a streamlined, local DevOps platform to enhance developer productivity while maintaining strong security measures.

Attendees will learn how to safeguard their repositories, avoid accidental exposures, and use open-source tools to improve overall development practices.

Key Takeaways:

1) The importance of preventing secret exposure in Git repositories.
2) How to integrate Gitleaks into a secure development workflow.
3) Best practices for using open-source tools to boost developer efficiency.

This talk is designed for developers, DevOps professionals, and open-source advocates seeking to secure their codebases while optimizing their workflows.

Key Takeaways

Key Takeaways:

1) The importance of preventing secret exposure in Opensource Git repositories.
2) How to integrate Gitleaks into a secure development workflow.
3) Best practices for using open-source tools to boost developer efficiency.

References

Session Categories

Tutorial about using a FOSS project

Which track are you applying for?

Main track

Speakers

Lavakush Biyani
Lavakush Biyani DevRel Engineer | Harness

Lavakush Biyani is working as a DevRel Engineer at Harness with a passion for sharing knowledge. He has presented at two prestigious international conferences: Open Source Summit Europe and All Day DevOps. As an AWS Community Builder and a member of the CNCF Kubeweekly Editorial team, Lavakush actively contributes to the tech community. He enjoys writing blogs and speaking at conferences and events to engage with and educate others.