GhostEnv Tool Stores Dev Secrets in OS Keychain to Prevent Git Leaks

·1 views

GhostEnv is a new open-source, language-agnostic developer tool designed to prevent accidental exposure of API keys and authentication secrets in Git repositories. It integrates with Git pre-commit hooks, pausing commits when its AST and regex scanner detects secrets in staged files and prompting the developer interactively before any changes are made. A companion command called 'ghostenv run' wraps any process and injects credentials directly from the native OS keychain — such as macOS Keychain, Windows Credential Manager, or Linux Secret Service — into transient process memory. Secrets are never written to local disk and are cleared from memory once the child process exits, leaving no local footprint. The tool claims sub-300ms execution and works across languages and frameworks without requiring language-specific hooks or library imports.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Layer-by-Layer AI Auditing: Why Spot Checks Leave Dangerous Gaps

Shipping AI systems reliably requires systematic, layer-by-layer auditing rather than quick spot checks, which tend to miss edge cases and multi-step failure points. A thorough audit covers every layer — data pipeline, model behavior, agent decision-making, downstream effects, and rollback paths — documenting potential failures before they reach production. Skipping even one layer creates a vulnerability that production traffic will eventually expose, often triggering cascading issues that are far costlier to fix. The recommended approach is to build a comprehensive audit checklist, assign it to a methodical reviewer with adequate time, and update it continuously as new issues emerge. Over time, this checklist becomes institutional knowledge capturing what genuinely matters for a given AI system's domain.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

The simple bitrate math that lets ffmpeg hit an exact target file size

A developer on DEV Community has outlined a straightforward arithmetic method to compress video files to a precise size limit using ffmpeg, eliminating the need for repeated trial-and-error exports. The core formula treats file size as bitrate multiplied by duration, then works backwards: given a known duration and a target size, the required bitrate becomes a single division. The process accounts for real-world factors such as container overhead (roughly 2%) and a fixed audio bitrate, with the remainder allocated to video. The author implemented this logic in a Rust command-line tool called DeepShrink, but emphasizes that the underlying math is the key insight. The approach is particularly useful when uploading to platforms like Discord or bug trackers that enforce strict file size limits.

0 comments Read more at DEV Community

ProgrammingHacker News ·

New Tool Sends Alerts for Premium Seats at 70mm IMAX Screenings of The Odyssey

A developer has launched a web tool called Imaxxing that notifies users when good seats become available at 70mm IMAX screenings of Christopher Nolan's upcoming film The Odyssey. The service targets moviegoers who want the best possible viewing experience at premium large-format theaters. Users can sign up to receive alerts rather than manually checking for seat availability. The tool was shared on Hacker News, where it garnered modest early attention from the community.

0 comments Read more at Hacker News

ProgrammingDEV Community ·

How WebSockets and Redis Work Together to Power Scalable Real-Time Apps

Modern web applications increasingly demand real-time features like live dashboards, instant messaging, and collaborative editing, creating complex engineering challenges around scalability and fault tolerance. WebSockets address these needs by enabling persistent, full-duplex communication between clients and servers, eliminating the inefficiencies of traditional HTTP's request-response model. However, WebSockets alone cannot manage state across multiple server instances or handle horizontal scaling effectively. Redis complements WebSockets by acting as a message broker and data store, with its Pub/Sub feature allowing multiple WebSocket servers to share messages without direct knowledge of each other. Together, the two technologies form a resilient architecture where Redis handles state management and inter-server communication while WebSockets maintain low-latency client connections.

0 comments Read more at DEV Community