research

Old Commits, Live Credentials: The Git History Blind Spot

Why secret scanning limited to HEAD misses a whole class of long-lived exposure, and the sweep methodology we now run on every engagement.