wrongsecrets icon indicating copy to clipboard operation
wrongsecrets copied to clipboard

Various github instruction secret challenges

Open commjoen opened this issue 3 years ago • 1 comments

  • [ ] Have a Github wiki instruction secret as per the Stammtich Hamburg meetup: we should have a secret in the wiki as part of an "instruction" or "example" .

@w1ntermute mentioned next to this one:

  • [ ] a secret in a closed github issue ^^. @drwetter mentioned:
  • [ ] An edited github issue where one realized that he pasted some secret sauce in by accident and then edit it to remove it.
  • [ ] have a screenshot in an issue (CloseD) to have the secret inside accidentaly "my passphrase is broken" and show the pahssphrase in the screenshot for a GPG unlock action.

commjoen avatar Sep 22 '22 19:09 commjoen

The text could be for part 1

#We need to rotate our AWS credentials The security said we need to rotate our secrets every 3 Months. So in this ticket we want to rotate the AWS Accesskeys. We also need to remove the old one without disruption.

  • [ ] Create new keys
  • [ ] Input the new keys
  • [ ] Deployment
  • [ ] Wait till the old keys are not used for a day
  • [ ] deactivate the old keys
  • [ ] delete the old keys

I don't have the permissions to create tokens Person2 can you do it?

Person2 Comment: Yes I can. Here are the new credentials aws_access_key: enoefnenfen aws_secret_key: eoioiefoifoiefon

Comment2: Thank you. Now we are safe again! Close Ticket

MaSven avatar Sep 22 '22 20:09 MaSven

@commjoen Happy to help.....please assign this work to me.

puneeth072003 avatar Dec 26 '22 12:12 puneeth072003

Hi @puneeth072003 , have a go at it!

commjoen avatar Dec 26 '22 19:12 commjoen

@puneeth072003, are you on OWASP slack?

commjoen avatar Dec 26 '22 21:12 commjoen

@commjoen No, Sorry I'm a newbie here i need help in getting started, please can you guide me

puneeth072003 avatar Dec 26 '22 23:12 puneeth072003

@commjoen where can i start

puneeth072003 avatar Dec 26 '22 23:12 puneeth072003

As discussed over Slack: CONTRIBUTING.md and README should help you along the way. Feel free to DM over slack when you are stuck.

commjoen avatar Dec 27 '22 03:12 commjoen

@commjoen Ok.

puneeth072003 avatar Dec 27 '22 05:12 puneeth072003