Git Security

4 posts

Apr 14, 2026

Expired Credentials That Still Work: The Zombie Key Problem (NHI Kill Chain #5)

Secret scanning alert: Resolved. Credential status: Active. Deleting a secret from code is not the same as revoking it. Inside the Zombie Key kill chain.

Ben Kim

Team Member

Mar 17, 2026

Publicly Exposed API Keys: What Happens When Credentials Reach Open Repos (NHI Kill Chain #7)

A .env file pushed to a public GitHub repo is found by attacker bots in 4 minutes. We map the full kill chain — from credential exposure to infrastructure compromise and show how to detect and respond before the damage is done.

Ben Kim

Team Member

Jan 25, 2026

Git Secret Scanning: Complete Guide for 2026

Complete guide to git secret scanning tools. Compare TruffleHog, GitGuardian, GitHub Advanced Security, and Cremit. Learn implementation strategies with real CI/CD examples

Ben Kim

Team Member

Aug 28, 2025

Nx Package Supply Chain Attack: How a GitHub Actions Vulnerability Caused a Global Crisis

Attackers exploited a GitHub Actions vulnerability to compromise the Nx package. Analysis of the attack chain, who was affected, and how to detect similar threats.

Ben Kim

Team Member

Cremit Inc

Securing the machine layer for the AI era.

Company

About Us
CareersHiring
News
Trust Center
Contact

Platform

Identity Inventory
Secret Scanning
Threat Detection
Lifecycle Automation
Offboarding Automation

Use Cases

E-commerce Security
Fintech Compliance
SaaS Security
Customer Stories

Integrations

GitHub Integration
AWS S3 Integration
Slack Alarm Integration
View All Integrations

The bottom line?

With Cremit, you can reduce your attack surface by 75% compared to manual secret management.

Developers

Trust Center