Tip of the week: check your git history for AI keys
With a new GhostAction wave under way, Socket advises treating any key that ever appeared in a commit as exposed, rotating it and turning on GitHub secret scanning.
← NewsSource of truthsocket.dev
GhostAction
2 stories
Source of truthsocket.dev
New GhostAction wave on GitHub targets AI keys, Socket says
Malicious workflows in GitHub repositories search for Anthropic, OpenAI and OpenRouter keys, including in git history, according to Socket.