Secrets in Public Git Repos - Why It Keeps Happening and How To Fix It

Learn why thousands of API keys, credentials, and tokens are accidentally leaked into public Git repositories daily and discover practical solutions to prevent these security vulnerabilities in this lightning talk by independent security researcher Arpit Jain. Explore the root causes of secret sprawl despite growing awareness in the developer community, and examine real-world cases including Trufflehog's discovery of over 12,000 live API keys in DeepSeek's AI model training data to understand how leaked secrets persist and escalate security risks. Discover how to implement open source tools like Gitleaks, Trufflehog, and Git pre-commit hooks to detect and prevent secret exposures before they become security incidents. Gain immediate, actionable strategies to secure your repositories and protect your organization from attackers who actively scan for exposed credentials in public code repositories.