Secrets Management

LeakChain: Detecting Sensitive Data Leakage Across Distributed Serverless Applications

LeakChain is an Infrastructure-as-Code–aware static analysis framework that detects sensitive-data leakage across distributed serverless applications. Built on CodeQL with cross-service taint tracking, LeakChain identifies intra-function, …

KubeKeeper: Protecting Kubernetes Secrets Against Excessive Permissions

Kubernetes has become the dominant platform for managing containerized applications, but its native Secrets management mechanisms introduce security vulnerabilities, especially in environments where third-party applications may have excessive …