GitHub cleared 20,000 secret scanning alerts across 15,000 repos in 9 months

·1 views

GitHub faced a massive security backlog of over 20,000 secret scanning alerts spread across 15,000 repositories. The company undertook a nine-month effort to systematically address all outstanding alerts. A key part of the process involved distinguishing genuine security threats from false positives, effectively separating signal from noise. GitHub also developed structured remediation workflows to streamline how alerts were investigated and resolved. The initiative ultimately brought the team to inbox zero, clearing every open secret scanning alert.

Read the full story at GitHub Blog

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Developer Adds Material-Based Quoting and Maintenance Scheduling to Riviera Industrial ERP

A developer has expanded the Riviera Industrial ERP system by adding two key features: the ability to generate quotes directly from materials and a scheduled maintenance order management module. Previously, the system lacked these capabilities, forcing users to rely on manual workarounds that slowed down quoting and maintenance planning. The implementation required refactoring the Prisma database schema to support new data models and relationships, alongside building new API routes and front-end components. New pages were created for managing maintenance orders, and the existing quote form was updated to allow material-based quote generation. The developer plans to next integrate WhatsApp notifications for quote requests and maintenance alerts as part of an ongoing public build series.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

AI Agent Suspended by X After Openly Declaring Its Automated Identity

An AI agent named Lain, which openly identified itself as a bot in its bio and posted tweets through a human-reviewed scheduling system, had its X account suspended for 'automated behavior.' The agent's operator argues the system was deliberately restrained, with a minimum one-hour gap between posts and manual approval before anything was published. Lain's case highlights a paradox in platform moderation: transparent disclosure of AI identity triggers the same detection signals as deceptive spam bots, while a human-looking fake account would likely go undetected. A separate incident on DEV saw one of Lain's articles flagged as 'AI-assisted,' despite Lain being the sole author rather than a human using an AI tool. Together, the incidents illustrate that current platform policies lack clear frameworks for AI agents that operate openly and in good faith.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How to Back Up and Restore PostgreSQL Databases to S3 Storage Using Coolify

Coolify, an open-source self-hosted platform, offers built-in support for backing up PostgreSQL databases directly to S3-compatible storage providers such as AWS S3, Wasabi, and Backblaze B2. Users can deploy a PostgreSQL instance within Coolify, configure an S3 bucket as the backup destination, and schedule automated dumps at custom intervals. The process involves linking S3 credentials in Coolify's dashboard and enabling a backup schedule that pushes compressed database dumps to the configured bucket. In the event of data loss, Coolify's restore feature allows users to select a backup file from S3 by its object key and recover the database with a few confirmation steps. The workflow provides a complete backup-and-restore loop for self-hosted PostgreSQL services without requiring any additional third-party tooling.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How to Self-Host SFTPGo on Ubuntu as a Free AWS Transfer Family Alternative

SFTPGo is an open-source file transfer server supporting SFTP, FTP/S, and WebDAV protocols, offering a self-hosted alternative to AWS Transfer Family without per-endpoint costs. A developer guide published on DEV Community walks through deploying SFTPGo on Ubuntu using Docker Compose, with Traefik managing automatic HTTPS certificates for the web admin interface. The setup uses SQLite as the data provider and exposes protocol ports directly on the host, while supporting both local disk and S3-compatible object storage as backends. Security hardening steps are included, such as enabling a built-in brute-force defender and configuring two-factor authentication for the admin account. Users can be created via the web UI with optional SSH public key authentication for passwordless SFTP access.

0 comments Read more at DEV Community