https://leakwatch.net/blog Engineering notes on secret scanning, leaked credentials and repository security. en https://leakwatch.net/blog/consuming-the-firehose-at-scale https://leakwatch.net/blog/consuming-the-firehose-at-scale How LeakWatch ingests thousands of public commits per minute without knocking over the forges' APIs: ETag caching, a rotating token pool, circuit breakers, and distributed dedup via Redis. Tue, 21 Jul 2026 00:00:00 GMT https://leakwatch.net/blog/i-accidentally-pushed-an-api-key-to-github https://leakwatch.net/blog/i-accidentally-pushed-an-api-key-to-github A calm, step-by-step guide for when you just leaked a secret to a public repo: rotate first, clean history second, check for abuse third — with the exact commands and provider links. Tue, 21 Jul 2026 00:00:00 GMT https://leakwatch.net/blog/how-leakwatch-secret-scanning-works https://leakwatch.net/blog/how-leakwatch-secret-scanning-works Inside the LeakWatch pipeline: ingesting the public commit firehose, 400+ regex patterns, heuristic and ML false-positive filtering, and strictly read-only secret validation. Mon, 20 Jul 2026 00:00:00 GMT