SafePipe: Secrets Leaks Prevention for CI/CD Pipelines
Year: 2025
Type: article
Abstract: The growing use of CI/CD pipelines has enhanced the speed of software delivery but also brought with it serious security threats, including the inadvertent exposure of sensitive data like API keys, passwords, and tokens. Current detection tools tend to lack real-time integration, visualization, and automation, thus being inefficient in continuous security monitoring. SafePipe is an open-source and lightweight security framework that identifies and prevents secret leakage during code deployment. It combines automated scanning of files, JSON reporting, and Streamlit-powered visualization dashboard that gives clear results to developers. Its modular architecture supports easy CI/CD integration with less configuration and no vendor lock-in. Experimental tests demonstrate that it detects frequent secret patterns with high accuracy and efficiency. SafePipe thus presents a functional, developer-friendly, and cost- effective solution to pipeline security that can be adopted both in academic research and industrial DevSecOps settings.
Authors: Priyanka K, Monish Prabu B, Mukesh Kumar R, Nithishkumar D, Tharunkumar S
Language: English
Subfield: Information Systems
Field: Computer Science
Domain: Physical Sciences
Open Access status: green
OpenAlex ID: W7107974056
FWCI:
Cites:
Cited by:
Related to: