Topic

TruffleHog

1 post about TruffleHog. Every summary links to the original.

Paid picks we use ourselves. Links carry a referral code — a subscription through one earns us a commission at no extra cost to you.

Newest first

Posts

Twilio
Automating Twilio Auth Token Detection and Rotation with TruffleHog, Tines, and Slack
Hardcoding Twilio Auth Tokens in source code or exposing them in plaintext leaves communication systems vulnerable to account takeover, toll fraud, and unauthorized exploitation. This tutorial presents an automated detection and rotation pipeline using TruffleHog for secret scanning, Tines for security workflow automation, and Slack for user interaction. TruffleHog scans local directories or remote Git repositories for Twilio secrets, performs live verification via API requests, and outputs results in JSON. Tines ingests detection events through a webhook, parses the results, and triggers a Slack notification with interactive buttons for acknowledgment, scheduling remediation, or immediate rotation. Upon rotation, Tines calls the Twilio Account API to generate a new secondary auth token, displays it in a Slack modal for secure copy, and eventually promotes it to primary, while the old token is revoked.

The best engineering reads, once a week.

Topic

1 post about TruffleHog. Every summary links to the original.

Paid picks we use ourselves. Links carry a referral code — a subscription through one earns us a commission at no extra cost to you.

Newest first

Twilio
Automating Twilio Auth Token Detection and Rotation with TruffleHog, Tines, and Slack
Hardcoding Twilio Auth Tokens in source code or exposing them in plaintext leaves communication systems vulnerable to account takeover, toll fraud, and unauthorized exploitation. This tutorial presents an automated detection and rotation pipeline using TruffleHog for secret scanning, Tines for security workflow automation, and Slack for user interaction. TruffleHog scans local directories or remote Git repositories for Twilio secrets, performs live verification via API requests, and outputs results in JSON. Tines ingests detection events through a webhook, parses the results, and triggers a Slack notification with interactive buttons for acknowledgment, scheduling remediation, or immediate rotation. Upon rotation, Tines calls the Twilio Account API to generate a new secondary auth token, displays it in a Slack modal for secure copy, and eventually promotes it to primary, while the old token is revoked.

The best engineering reads, once a week.