Thousands of Live Secrets Found Across Four Cloud Development Environments

A report by Truffle Security identified thousands of live secrets—such as API keys, credentials, and tokens—exposed across four major cloud development environments. The findings highlight the prevalence of hardcoded secrets in cloud-based workflows and repositories. The research focused on environments including GitHub, GitLab, Bitbucket, and AWS. The exposed secrets were found in public and private repositories as well as cloud storage.