#GitHub Secret Scanning
43 related articles
·5 min
OSINT Tools for Automated Discovery of Exposed Files on Domains: Principles, Applications, and Compliance Boundaries
Deep dive into how OSINT automation tools discover exposed files on domains, covering dictionary probing principles, attack surface management, bug bounty techniques, and compliance boundaries.
Read more →
·6 min
Alibaba Bans Claude Code: The Enterprise Security Red Line for AI Coding Tools
In-depth analysis of Alibaba's comprehensive internal ban on Claude Code: from the hidden-marker controversy and Anthropic's regional-restriction stance to five core questions of enterprise AI coding tool security admission.
Read more →
·6 min
Codex China Direct Access Tutorial: Guide to Using DeepSeek as a ChatGPT Replacement
Use Codex without a ChatGPT account! This guide explains a China direct access solution for integrating the DeepSeek API via the Codex++ management tool.
Read more →
·4 min
How to Use Codex in China Without a ChatGPT Account: A Complete Guide with DeepSeek
No ChatGPT account? No problem. Learn how to configure DeepSeek API with Codex++ to use Codex in China — full setup guide, API key steps, and model switching included.
Read more →
·2 min
AI Coding Assistants Become New Attack Targets: DNS Covert Channels Used to Steal Developer Credentials
Researchers reveal attacks targeting AI coding assistants like Claude Code: malicious setup scripts use DNS covert channels to steal API keys, bypassing static scans.
Read more →
·7 min
Building an AI Agent from Scratch: Implementing Core Conversational Agent Features in Python
Learn AI Agent development from scratch. This tutorial covers LLMs and prompts, then builds a conversational agent in Python using the DeepSeek API with multi-turn dialogue and system prompts.
Read more →
·6 min
GitHub Advisory Database Hits Historic Record: How to Address the Flood of Vulnerabilities in Software Supply Chain Security
GitHub Advisory Database hits historic vulnerability submission records, reflecting systemic security pressure on open-source supply chains. A deep analysis of driving factors, response strategies, and practical recommendations.
Read more →
6 Free GitHub Security Settings Every …
·4 min
6 Free GitHub Security Settings Every Maintainer Should Enable
GitHub offers 6 free security settings for open source maintainers: 2FA, Dependabot alerts, secret scanning, branch protection, permission reviews, and code scanning. Configure once, benefit long-term.
Read more →
·4 min
OpenAI Agents SDK in Practice: Harness and Sandbox Separation Architecture Explained
Deep dive into OpenAI Agents SDK updates covering Harness-Compute separation, Codex-style orchestration, sandbox snapshots, skills system, and multi-agent collaboration with practical demos.
Read more →
·3 min
Hermes Agent Deep Dive: A Self-Evolving Agent Architecture with Practical Implementation Guide
Deep dive into Hermes Agent's core architecture: four-layer memory system, Skill self-evolution mechanism, Harness Engineering methodology, OpenCloud comparison, and Feishu integration tutorial.
Read more →
·2 min
New v0 Feature: Automatically Detects Secrets in Prompts and Converts Them to Environment Variables
Vercel v0 introduces a security feature that auto-detects API keys and tokens in user prompts and converts them to environment variables, preventing secret leakage.
Read more →
Tutorials·3 min
Practical Guide to Configuring MCP Servers and Extensions in Gemini CLI
Learn how MCP servers work in Gemini CLI and how to configure them. Step-by-step guide using Context7 and Firebase extensions to expand AI coding capabilities.
Read more →
Product Reviews·3 min
CodeRabbit Free AI Code Review Tool Hands-On: VS Code Extension Experience
Hands-on review of CodeRabbit's free AI code review tool, covering VS Code extension setup, Git branch workflow integration, security detection, and AI coding assistant collaboration.
Read more →
Tutorials·3 min
Building a $400K/Month App from Scratch with Claude Code
Complete guide to building a coin identification app with Claude Code, covering tech stack selection, AI integration, real-device testing, and App Store publishing, with CoinSnap's $500K/month business model analysis.
Read more →
Tutorials·3 min
Claude Code Hooks Explained: Build Your Own Automated Development Inspector
Deep dive into Claude Code Hooks' four core use cases: intercepting dangerous operations, auto change logging, code review, and automated testing. Learn Command, Prompt, and Agent Hook types.
Read more →
Tutorials·2 min
Three Key Features of Gemini CLI Explained: Hooks, Skills, and Plan Mode Make AI Coding Truly Controllable
Deep dive into Google Gemini CLI's three core features: Hooks intercept security risks, Skills reuse team knowledge, and Plan Mode enforces think-before-code workflows.
Read more →
Tech Frontiers·2 min
GitHub Internal Repository Unauthorized Access Incident Explained: Impact Scope and Security Recommendations
GitHub disclosed unauthorized access to its internal repositories and is conducting a full security investigation. This article analyzes the impact scope, official response, and provides supply chain security recommendations.
Read more →
Industry Insights·2 min
OpenAI Codex Rated Leader in Gartner Magic Quadrant: A New Landscape for Enterprise AI Coding Agents
Gartner's first Magic Quadrant for Enterprise AI Coding Agents names OpenAI Codex a Leader. Deep analysis of what this means for the industry landscape.
Read more →
Tech Frontiers·3 min
UK's GDS Publicly Opposes NHS Decision to Shut Down Open Source Repositories: The Open vs. Secure Debate in the AI Era
UK's GDS publicly opposes NHS's blanket shutdown of open source repositories over AI security concerns, advocating "open by default" in a rare public disagreement revealing deep governance tensions.
Read more →
Deep Dives·4 min
How Dangerous Are Windsurf Account-Switching Plugins? A Deep Dive into Technical Principles and Security Risks
Deep analysis of Windsurf seamless account-switching plugin's technical implementation, revealing risks of account bans, code theft, and legal liability. Four compliant alternatives for developers.
Read more →