Frederic Lardinois / TechCrunch:
GitHub brings its free secret scanning program, which scans repositories for 200+ known token formats and alerts users of potential leaks, to all public repos — Every developer knows that it’s a bad idea to hardcode security credentials into source code. Yet it happens and when it does, the consequences can be dire.