7.25M Gitee Repos Scanned, 26,400 Live Secrets Found Using Modal, TruffleHog and Kingfisher
charles_irl · x · 2026-10-28
Independent security researcher Ben Zimmermann, working with MongoDB's Kingfisher team, scanned 7,256,531 public repositories on Gitee and found 26,400 unique verified-live credentials, including an active org-admin credential for a major enterprise AI platform and thousands of working cloud access keys. Gitee's API is severely constrained (no paginated projects endpoint, code search retired), which stymied a 2021 attempt; this time the researcher used Modal serverless compute to clone and scan every repo in a single Python script, running TruffleHog and Kingfisher concurrently since each verified secrets the other missed. Gitee lacks GitHub-style vendor secret-scanning partnerships, so secrets in commit history persist. Modal's Charles Frye frames it as a win for defense-in-depth.
More from Infra
- Strata routing test: route prior boosts decode 45% with minimal quality loss — blakeman8192 · 2026-10-29
- Customs-based compute stats miss smuggled GPUs, domestic chips, and cloud rentals — pstAsiatech · 2026-10-29
- Wish List: The Grok App, But Backed by My Self-Hosted Hermes Server — intellectronica · 2026-10-29
- Behold: A Cluster Made of Matchbox-Sized Fomu FPGA Boards — zzznah · 2026-10-29
- Harmonic's Aristotle Proves 185 Properties of a 12.2M-Gate Chip Block, Cuts Power ~26% — satnam6502 · 2026-10-29
- IT vendor lists $60M AI supercomputer with 9,600 A100 GPUs on eBay — free shipping included — giveen · 2026-10-29