plaintext credentials

git-credential Risks: When Helpers Leak What They Cache

Post author:Prabhu Kalyan Samal
Post published:January 25, 2023
Post category:Cryptography & PKI Security Supply Chain Security

Git's January 2023 advisory flagged plaintext credential stores and verbose logs echoing 2FA tokens. Developer tooling is production security surface.