On October 23, GitHub announced improvements to public monitoring for leaked secrets.
The update includes ongoing checks to show whether supported exposed credentials are still active.
It also raises a separate point about documenting your own work: you don't have to make source code public to create a dated record of it.
I'm part of the Ecode team. Ecode calculates a SHA-256 fingerprint on your device. Your source code stays there.
The service registers the fingerprint in a database, adds a trusted RFC 3161 timestamp, and creates a Polygon blockchain record.
You receive a certificate with a QR code, a timestamp file, and a blockchain transaction link.
Keep those records with the original files and development history. They can help support an authorship claim.
Ecode doesn't scan for leaked credentials or check whether code is secure. Those checks still matter.
Registration is free. No card or subscription is needed.
Top comments (0)