Generative AI Security: Are Your Developers Pasting Secrets Into LLMs?

说明与用途

将 GitGuardian 集成到 AI 网关中，可检测并阻止 LLM 请求中的秘密泄露，降低数据暴露风险。

问题

Developers inadvertently paste secrets into AI prompts or tool calls, leaking them to third‑party model providers without any repository involvement.

结果

Deploying a GitGuardian‑backed AI gateway surfaced hundreds of secret incidents within weeks, with many valid findings that never touched a git repository.

工作流

• 1. Configure GitGuardian with Custom Sources and a service account. 2. Deploy an internal AI gateway that forwards each request to GitGuardian’s /v1/scan/create-incidents API with the Custom Source UUID. 3. GitGuardian scans the payload in memory using 600+ detectors and creates incidents in the dashboard. 4. The gateway either forwards the request (non‑blocking) or rejects it (blocking) based on the chosen mode.

证据

GitGuardian detected over 1.27 million leaked secrets tied to AI services, an 81% jump from the previous year.

来源

One customer deployed GitGuardian behind their internal AI gateway and surfaced hundreds of secret incidents within weeks.

来源

The AI gateway forwards the payload to GitGuardian's scan API, tagged with your Custom Source UUID. We scan in memory and return findings.

来源