Source:-https://portswigger.net/ Software code repositories could be harboring organizations’ credentials, secrets, and other sensitive data without developers’ knowledge – and this information could provide an invaluable resource for criminal hackers. This is according to security specialists at communications technology company Twilio, who have launched a free tool that warns developers when they accidentally include sensitive information in their code before it’s uploaded to a repository. Deadshot monitors GitHub pull requests in real time. The open source tool flags the potential inclusion