---
title: "#155: Scan your Git history for secrets and tokens"
publication: "StatusCode Weekly"
issue: 155
published_at: "2018-02-28"
canonical_url: "https://weekly.statuscode.com/issues/155"
---

WebOps Weekly 155   . 

The latest Web operations, HTTP, and Web performance news -[Read this on the Web](https://webopsweekly.com/issues/155) 

[![WebOps Weekly\](https://webopsweekly.com/images/webops-header.png)](https://webopsweekly.com) Issue 155 — February 28, 2018     

[A Practical Introduction to Container Terminology](https://developers.redhat.com/blog/2018/02/22/container-terminology-practical-introduction/) tutorial The world of containers has introduced a lot of new terms and phrases to developers and sysadmins alike. This post digs into some common terms that are often misunderstood. Scott McCarty [A 36-Way Comparison of Cloud CPUs vs Bare Metal](https://www.phoronix.com/scan.php?page=article&item=cloud-cpu-36&num=1#cloudcpus) opinion A thorough benchmark comparing compute power as offered by Amazon EC2, Google Compute Engine, Azure Cloud Instances, and bare Intel and AMD CPUs. Bare metal and the largest EC2 instances seem to win the day on [the Web-oriented tests.](https://www.phoronix.com/scan.php?page=article&item=cloud-cpu-36&num=5) Phoronix [Inspect, Detect, Respond: Orchestrate Your App Security](https://www.sqreen.io/?utm_medium=email&utm_source=external&utm_campaign=WebOpsWeekly%20-%20email%20-%20Security%20Orchestration) Get full visibility into your app security, get alerted on critical issues and easily build automated responses against security threats. Sqreensponsored[![\](https://copm.s3.amazonaws.com/fc6a3daa.png)](https://www.sqreen.io/?utm_medium=email&utm_source=external&utm_campaign=WebOpsWeekly%20-%20email%20-%20Security%20Orchestration) [GitLeaks: Check Git Repos and History for Secrets and Keys](https://github.com/zricethezav/gitleaks) tools Worried you’ve got things like AWS details, GitHub tokens or SSH keys hanging around your project’s git history? Find out for sure with this Go-based tool. Zachary Rice [In-the-Wild DDoSes Use New Way to Achieve Unthinkable Sizes](https://arstechnica.com/information-technology/2018/02/in-the-wild-ddoses-use-new-way-to-achieve-unthinkable-sizes/) story A new DDoS approach leaning on the [memcached](https://memcached.org/) caching server and IP-spoofed UDP packets. More detail in [Cloudflare’s writeup here.](https://blog.cloudflare.com/memcrashed-major-amplification-attacks-from-port-11211/) Secure your memcached servers ASAP. Ars Technica [AWS Serverless Application Repository Now Available](https://aws.amazon.com/blogs/aws/now-available-aws-serverless-application-repository/) news A new ecosystem of serverless apps and components that can be easily brought together and hosted on AWS. It’s now open to both consumers and providers. Jeff Barr [The Definitive PHP 5.6, 7.0, 7.1, 7.2 and HHVM Benchmark](https://kinsta.com/blog/php-7-hhvm-benchmarks/) opinion How do different versions of PHP and HHVM stack up against each other in 2018? In most cases PHP 7.2 takes the crown _if_ your apps support it. Kinsta [Third Party CSS Is Not Safe](https://jakearchibald.com/2018/third-party-css-is-not-safe/) opinion A look at some of the ‘tricks’ untrusted CSS could attempt on a site to monitor users or change the site’s functionality in negative ways. Jake Archibald Jobs [DevOps Automation Engineer (Chef, Ruby, Python) in Berlin, Germany](https://zenmate-jobs.personio.de/job/8535?_pc=22496) Make the internet a more secure & private place for more than 42M users globally with our VPN. ZenMate [Find a Job You're Passionate About](https://www.vettery.com/tech?utm_medium=cooper-webopsweekly&utm_campaign=ad-9311&utm_source=newsletter&utm_content=grouped&utm_term=tech) Vettery connects you directly to hiring managers at over 4,000 top companies. Make a profile today and land your dream job. vettery In brief [PostgreSQL 10 Now Supported on Amazon RDS](https://aws.amazon.com/about-aws/whats-new/2018/02/postgresql-10-now-supported-in-amazon-rds/) news Amazon Web Services [Mesosphere's DC/OS Will Soon Offer Managed Kubernetes](https://thenewstack.io/mesospheres-data-center-operating-system-will-offer-managed-kubernetes/) news DC/OS ([Data Center Operating System](https://mesosphere.com/product/)) is adding full support for Kubernetes in addition to Mesosphere’s own _Marathon_. The New Stack [Dropbox Saved Almost $75M by Building Its Own Tech Infrastructure](https://www.geekwire.com/2018/dropbox-saved-almost-75-million-two-years-building-tech-infrastructure/) news GeekWire [The Optimized Droplet Performance Test - See the Results](https://blog.digitalocean.com/a-practical-droplet-performance-comparison/?utm_source=paid_newsletter+WebOps+weekly&utm_medium=display&utm_campaign=Brand+tutorial+newsletter&utm_content=2-28-2018+Webops+weekly+cooperpress) We tested the performance of an optimized vs standard droplet with tasks that are done most often on servers. DigitalOceansponsored [Validating Leaked Passwords with k-Anonymity](https://blog.cloudflare.com/validating-leaked-passwords-with-k-anonymity/) tutorial Junade Ali [How to Write Dockerfiles for Python Web Apps](https://blog.hasura.io/how-to-write-dockerfiles-for-python-web-apps-6d173842ae1d) tutorial Praveen Durairaj [Preparing for AWS's Support of Certificate Transparency](https://aws.amazon.com/blogs/security/how-to-get-ready-for-certificate-transparency/) tutorial Includes an intro as to why certificate transparency is important, too. Jonathan Kozolchyk [Using Amazon Athena and QuickSight for ALB-ELB Access Log Analysis](https://blog.zoph.me/cloud/Athena-ALB-ELB-Analysis/) tutorial Victor Grenu [How Shopify is Future Proofing Its Cloud Storage Usage](https://shopifyengineering.myshopify.com/blogs/engineering/future-proofing-our-cloud-storage-usage) story Shopify Engineering [Application Deployment at Deliveroo](https://deliveroo.engineering/2018/02/21/application-deployment.html) story How a popular UK food delivery service uses Terraform. Ben Cordero [What I Learnt Building High Traffic Apps on an Embedded Key/Value Store](https://hackernoon.com/what-i-learnt-from-building-3-high-traffic-web-applications-on-an-embedded-key-value-store-68d47249774f) story Namely [BoltDB](https://github.com/boltdb/bolt), a Go-based key/value database. Anthony Alaribe [Four Continuous Delivery Metrics that Improve Your Pipeline](https://www.gocd.org/2018/01/31/continuous-delivery-metrics/?utm_campaign=cd_metrics_blog&utm_medium=email&utm_source=cooperess_webops&utm_content=cd_metrics_blog&utm_term=) GoCDsponsored [How GraphQL Solves the Problem of Sprawling Architecture](https://graphqlme.com/2018/02/17/how-graphql-solves-the-problem-of-sprawling-architecture-for-the-enterprise/) opinion Matt Engledowl [Microservices: It's All About the Events](https://thenewstack.io/microservices-its-all-about-the-events/) opinion Joab Jackson [img: Standalone Dockerfile and OCI Compatible Container Image Builder](https://github.com/jessfraz/img) tools Jess Frazelle [gRPCurl: Like curl, But for gRPC](https://github.com/fullstorydev/grpcurl) tools Engineering at FullStory [Linux Cloud Hosting Starting at 1GB of RAM for $5/mo](https://welcome.linode.com/webopsweekly/?utm_source=cooperpress&utm_medium=sponsored&utm_term=webops-weekly&utm_campaign=webops-weekly-brief) Linode Cloud Hostingsponsored    [Read this issue on the Web](https://webopsweekly.com/issues/155) [See our archives](https://webopsweekly.com/issues) [Change your email address](*|UPDATE_PROFILE|*)  [Stop getting this newsletter](*|UNSUB|*)  

Published by [Cooperpress](https://cooperpress.com/)
Fairfield Enterprise Centre, Lincoln Way, Louth, LN11 0LS, UK