medium10 pts · first answer countsdevsecopsincident-response

Cloud key pushed to a public repo

A developer pushed a cloud access key to a public GitHub repo 10 minutes ago. What should you do first?

A.Force push to delete the commit from main; that removes the key from everywhere it was seen or cloned.B.Make the repository private straight away, which hides the commit from scanners.C.Revoke or rotate the key now and check audit logs for misuse, then clean the history.D.Add the file to .gitignore and push again, so the key is replaced in the next commit.

Discussion 0

Join free to post in the discussion.

Cloud key pushed to a public repo

Discussion 0

Related questions