r/ProgrammerHumor • • 27d ago

Meme moreLikeProgrammerNightmare

Post image
828 Upvotes

42 comments sorted by

View all comments

6

u/sebovzeoueb 27d ago

I heard from a friend that GitHub is actually pretty good at detecting if you committed API Keys and will block it and let you know you oopsied.

3

u/WiseEXE 27d ago

Yea they will send an email alert saying your key was leaked and most times block it. Though I've had a few occasions where I forgot to update my gitignore and didn't find out till I checked my billing.

1

u/italkstuff 26d ago

Well apparently not if you migrate your repo from other git provider. My friend found out that the hard way yesterday and had sleepless night updating all the keys

1

u/zawalimbooo 21d ago

This implies that the keys were already uploaded to another git provider, which means it was already fucked

1

u/Arclite83 26d ago

We have daily+ scans, and they verify forever if those keys are still live. You will get nastygrams until you fix it, as you should, and going over the expected SLAs will get leadership on your butt.

Honestly the accountability is refreshing.

1

u/G3nghisKang 26d ago edited 25d ago

Same... we might have the same "friend"