Your logs are leaking secrets in 24 languages

Every leaked credential has the same origin story. Nobody commits password = "hunter2" to GitHub anymore — scanners catch that. What actually happens is quieter: someone writes

logger.info({ user }, 'login ok');

Enter fullscreen mode

Exit fullscreen mode