Blogs

Preventing secrets in source code

Semgrep

What we mean by secrets in application security, how to find secrets in your code with a secret scan, & preventing secrets from being leaked or spilled to the public.

Visit Site

New React2Shell Offspring Patched: React Server Components (DoS) and Source Code ExposureSemgrep Detect Open Source Malware Attacks with Semgrep Supply ChainSemgrep Enterprise Scale Code Scanning: Semgrep Managed Scans Crossed 1 MILLION Weekly ScansSemgrep Sha1-Hulud: The Second Coming of the NPM Worm is Digging For SecretsSemgrep Fix What Matters, Faster: How Semgrep and Sysdig Are Unifying Security from Code to RuntimeSemgrep Finding vulnerabilities in modern web apps using Claude Code and OpenAI CodexSemgrep Docs-as-code solutions for API teams: how to choose the right platform in 2026Mintlify Mintlify Alternatives: What to Consider (and Why There's No True Substitute)Mintlify Build a Presentation Coaching Application with Recall - Deepgram Blog ⚡️Deepgram No Code Transcription: Simplifying Workflows with Deepgram and Make.comDeepgram 5 Reasons to Keep Contributing to Open-Source Projects - Deepgram Blog ⚡️Deepgram Grafana Is Not Worried About AWS CommercializationThenewstack Oso Unbundles Security AuthorizationThenewstack Empower Your Team with Policy as CodePulumi Pulumi ESC and External Secrets Operator: The Perfect Solution for TodayPulumi How We Eliminated Long-Lived CI Secrets Across 70+ ReposPulumi Five Years of Infrastructure as CodePulumi Pushing Pulumi ESC Secrets into External PlatformsPulumi New Policy as Code Capabilities with CrossGuardPulumi Godoc: documenting Go code - The Go Programming LanguageGo