Security
secret scanning
detect committed keys (trufflehog/gitleaks)
Source board
This definition comes from the board below. Open it to see the term in context.
Application HardeningSecurityMore terms from this board
- allowlist vs denylistaccept-known-good vs block-known-bad
- canonicalizenormalize before checking
- CVEa known published vulnerability
- fail securelydeny + generic error on failure
- hardeningl.01 principles applied everywhere
- input validationcheck untrusted input at the boundary
- lockfilepinned dependency versions
- masked variablehidden in logs
- OIDC-to-cloudshort-lived CI creds, no static keys
- SAST/DASTstatic / dynamic app security testing
- SBOMsoftware bill of materials
- security headersCSP/HSTS/X-Frame-Options/nosniff
- security misconfigurationunsafe defaults/settings (OWASP)
- SLSA/sigstorebuild provenance & signing
- supply chainyour dependencies (+transitive)