Trestle Articles https://trestlescan.com/articles/ Guides on finding, fixing, and preventing leaked secrets: responding when a key leaks, how secret scanning works, and how Trestle can help. en Mon, 22 Jun 2026 01:00:00 GMT API key leak prevention: how to keep secrets out of your code https://trestlescan.com/articles/api-key-leak-prevention/ https://trestlescan.com/articles/api-key-leak-prevention/ A practical, vendor-neutral guide to API key leak prevention: why credentials leak, what it costs, and the layered defenses that stop secrets from escaping your codebase. Guide Mon, 22 Jun 2026 01:00:00 GMT Four secret scanners compared on four codebases https://trestlescan.com/articles/secret-scanners-compared/ https://trestlescan.com/articles/secret-scanners-compared/ Trestle, Gitleaks, TruffleHog, and detect-secrets run with default settings over four public codebases. Every scanner catches an obvious API key. The differences show up with the secrets that don't look like secrets: hashed passwords, weak passwords, credit card numbers, and values that get sent to the browser. Tool comparison Wed, 17 Jun 2026 01:00:00 GMT