Who actually uses a leaked AWS key? Tracing it with rotating canaries
Every honeypot write-up says the same thing about leaked cloud keys: put one on the internet and someone will try it within hours. That’s true. I watched it happen on day one. ...
Cloudflare-Workers
Repo Secret Scanner — Architecture & Design
Overview The Repo Secret Scanner at cybergrind.org/tools/repo-scanner/ scans public GitHub repositories for exposed credentials — AWS keys, GitHub tokens, Slack tokens, Stripe keys, private keys, and more — without ever cloning the repository. It runs entirely on a Cloudflare Worker, reads files directly via the GitHub API, and returns a severity-scored dashboard of findings with matched secrets redacted before they ever leave the scanner. ...
Repo Secret Scanner — Deployment Guide
Overview This guide covers the complete deployment of the Repo Secret Scanner from a fresh clone to a live public tool. It assumes you’re deploying into the same stack used for CyberGrind: Hugo + PaperMod on Cloudflare Pages, Cloudflare Workers for serverless backend functions, and GitHub for source control. ...