Feature Description
This is a suggestion to add security canaries to this repo for monitoring and detecting supply chain attacks. A great example of the benefits of canaries in protecting the community is seen in this Grafana post, and research Detecting the Modern Supply Chain Attack: High-Fidelity Canaries for CI/CD.
Problem and Solution
There's a free Tracebit Community Edition GitHub integration you can install here that sets this up in under 5 minutes - once you do, it injects canary tokens (decoy credentials that look real but nothing legitimate ever uses) into every running build. If anyone tries to use one, you get an alert straight away. Since no real process ever touches them, a trigger means there's likely an issue.
Additional Context
Full disclosure: I work for Tracebit and worked on this myself. Our Community Edition is fully designed with community in mind and will remain free forever.
Are you willing to contribute to the development of this feature?
Feature Description
This is a suggestion to add security canaries to this repo for monitoring and detecting supply chain attacks. A great example of the benefits of canaries in protecting the community is seen in this Grafana post, and research Detecting the Modern Supply Chain Attack: High-Fidelity Canaries for CI/CD.
Problem and Solution
There's a free Tracebit Community Edition GitHub integration you can install here that sets this up in under 5 minutes - once you do, it injects canary tokens (decoy credentials that look real but nothing legitimate ever uses) into every running build. If anyone tries to use one, you get an alert straight away. Since no real process ever touches them, a trigger means there's likely an issue.
Additional Context
Full disclosure: I work for Tracebit and worked on this myself. Our Community Edition is fully designed with community in mind and will remain free forever.
Are you willing to contribute to the development of this feature?