Scanning 7.25 Million Public Repositories on China's Largest Git Platform for Secrets
Summary
A security research article reveals that scanning 7.25 million public Gitee repositories surfaced 26,400 unique live credentials. The researchers used a dual-scanner approach (TruffleHog and Kingfisher) to identify exposed secrets, analyzed per-vendor distributions, and discussed disclosure and remediation challenges. The findings highlight credential exposure risks on code-hosting platforms and implications for security teams and SMB IT operations.