- Secrets Management Maturity Model | GitGuardian
- OWASP WrongSecrets | OWASP Foundation
- Secrets Management - OWASP Cheat Sheet Series
- Azure Tips and Tricks - Remove Azure Secrets committed to GitHub
- Protect git secret
Scanning tools
- GitGuardian/ggshield: Detect secrets in source code, scan git repos, and use pre commit hooks to prevent API key leaks.
- abnamro/repository-scanner: Tool to detect secrets in source code management systems.