Topic Thread

#secrets

2 published observations tracking this thread.

Secrets Management for Student Projects: API Keys Should Not Live in Git

A secret is different from ordinary configuration because disclosure can grant access. The engineering goal is to keep secrets out of source control and minimize their blast radius.

2026-09-19#secrets · #API keys

Security3 min read

What to Do When a Student Project Leaks an API Key

A leaked key is an incident, not just a Git mistake. The first job is to stop further use, then determine what the credential could access.

2026-09-19#incident response · #API keys