Blogs

🤫 Don't leak your secrets

Semgrep

Semgrep users often ask about scanning code for secrets—passwords, API keys, Git Hub personal access tokens (PATs), etc.

Visit Site

Sha1-Hulud: The Second Coming of the NPM Worm is Digging For SecretsSemgrep Secrets Story: The Prefixed Secrets That Tried%20to%2BGet\nAwaySemgrep London calling: Highlights from the 2025 cloud & cyber security expoSemgrep Boosting Security Scan Performance for Monorepos with Multicore Parallel ProcessingSemgrep Beyond Benchmarks: How Semgrep Redefines Javascript SecuritySemgrep Benchmarking Semgrep Community Edition Performance ImprovementsSemgrep How we grew Mintlify by doing things that don't scaleMintlify Pulumi ESC and External Secrets Operator: The Perfect Solution for TodayPulumi How We Eliminated Long-Lived CI Secrets Across 70+ ReposPulumi Pushing Pulumi ESC Secrets into External PlatformsPulumi Lies, damn lies, and benchmarksDeepgram Thanks for the Memories: The Power of Event SourcingThenewstack Protecting Secrets with DockerDocker AI governance: What it is + why it's importantZapier Faster Secrets in Pulumi IaCPulumi Setting up and Customizing the Ant Design System in a Nuxt AppCss Tricks Questions to Ask Your Hardened Image ProviderDocker Making the Most of Your Docker Hardened Images Enterprise Trial - Part 1Docker Introducing Rotated Secrets in Pulumi ESCPulumi Kubernetes Secrets: How to Create, Use, and Secure ThemAquasec