Trestle Articles Guides on finding, fixing, and preventing leaked secrets: responding when a key leaks, how secret scanning works, and how Trestle can help. https://trestlescan.com/articles/ 2026-06-22T01:00:00.000Z Trestlehttps://trestlescan.com/ API key leak prevention: how to keep secrets out of your code https://trestlescan.com/articles/api-key-leak-prevention/ 2026-06-22T01:00:00.000Z 2026-06-22T01:00:00.000Z A practical, vendor-neutral guide to API key leak prevention: why credentials leak, what it costs, and the layered defenses that stop secrets from escaping your codebase. Four secret scanners compared on four codebases https://trestlescan.com/articles/secret-scanners-compared/ 2026-06-17T01:00:00.000Z 2026-06-17T01:00:00.000Z Trestle, Gitleaks, TruffleHog, and detect-secrets run with default settings over four public codebases. Every scanner catches an obvious API key. The differences show up with the secrets that don't look like secrets: hashed passwords, weak passwords, credit card numbers, and values that get sent to the browser.