SBSi is the digital platform subsidiary of SBS. It builds and runs the streaming that carries the Olympics and the World Cup, where traffic arrives in a few enormous spikes a year and none of them can be moved. Live streaming, VOD delivery, advertising and news each run on their own cloud footprint. Credentials for all of it accumulate in GitLab repositories, configuration files and documentation, and the estate had years of that behind it.
The security team connected GitLab, covering the repositories behind SBS play, Gorilla and the other flagship services. Cremit reads commit history rather than only the current state of each file, which is where credentials from years of shipping actually sit.
As media infrastructure moves to the cloud, credential management becomes exponentially more complex. Cremit gave us the visibility we needed to secure our GitLab environment and protect the cloud infrastructure that serves millions of viewers every day.
A single scan returned cloud credentials from several different providers across the SBSi repositories, accumulated over years of development. They were secured. Monitoring now runs continuously on the GitLab environment, which matters more than the one-time count: every new service integration adds another place a credential can be left behind, and this platform adds services every year.
