🔥🔥 I’m mind blown.. A @Netlify customer just accidentally committed a secret in their changes to @github, the automatic Netlify build did secret scanning and stopped the build from going to production automatically. They used our “why did it fail” capability to determine the…

JavaSquip's tweet image. 🔥🔥 I’m mind blown.. A @Netlify customer just accidentally committed a secret in their changes to @github, the automatic Netlify build did secret scanning and stopped the build from going to production automatically. They used our “why did it fail” capability to determine the…

@adocomplete day 1 win 🙌🙌


this rules sooo much the Netlify logs are so good.


Right?! And the list of things we have planned to build on top of it is unbelievable. All killers, no fillers 👊👊


it’s getting real



I saw this secret key warning pop up the other day, and was SUPER impressed. It turned out to be a false positive (a public key the agent had labeled private) but was happy it caught it anyway. Fed the Netlify warning back to Claude and it updated everything for me.


Dude! It’s SUCH a peace of mind.


@JavaSquip does this increase build time and for existing enterprise customers, is this on by default?


Secrets scanning? Yes it’s on by default and yes it increases build times… usually by a few milliseconds. But even if it was 30s or more that’s worth it to protect sites. Especially with the age of AI that might mess something up on even preproduction it’s saved countless of…


That means Claude has your secret ?


Not necessarily, no. Secrets don’t have to be in plaintext to be exposed. It could be rendering an environment variable that’s only known at site generation time.


Nice PR dude, can just use the Claude Security Github Action


Sure can! Big fan of that too, use the tools that work for you 👊 AR is set up so the non technical team can also use these tools without needing to know what a CLI is, PRs, etc. we handle the technical bits because we know how to build and run the site as well


Just use pre-commit and it will never get that far 🤦‍♂️


Totally! Though Some stuff is only visible at production build time.. e.g. db passwords and such. Gotta make sure none of it’s there end to end


Good to see automated secret scanning catching accidental commits.


United States Trends
Loading...

Something went wrong.


Something went wrong.