Keep your secrets secret: 5 core tips — and a call to action on modernizing

Guidance for reducing secrets exposure across public code/image repositories, cloud storage, SaaS apps, package managers, and self-managed services, emphasizing centralized secrets management, least-privilege and MFA, CI/CD-integrated scanning (including history), continuous auditing/monitoring, vendor due diligence, and segmentation or compensating controls for legacy systems; it also highlights supply chain risks like typosquatting and dependency confusion and concludes that faster, modern AST final checks are needed to keep pace with DevOps.