# secret store

Published articles for secret store.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## How Postman Passport keeps API secrets inside your network

DevFeed: [How Postman Passport keeps API secrets inside your network](<https://devfeed.tech/articles/how-postman-passport-keeps-api-secrets-inside-your-network-12637.md>)

Original publisher: [Read original article](<https://blog.postman.com/how-postman-passport-keeps-api-secrets-inside-your-network/>)

Author: Talia Kohan

Published: 2026-08-24T16:00:00Z

Content type: article

Language: en

Sources: [Postman Blog](<https://devfeed.tech/sources/postman-blog.md>)

Topics: [API](<https://devfeed.tech/topics/api.md>), [Postman](<https://devfeed.tech/topics/postman.md>), [API keys](<https://devfeed.tech/topics/api-keys.md>), [Security](<https://devfeed.tech/topics/security.md>), [Architecture & Design](<https://devfeed.tech/topics/architecture-design.md>), [Network](<https://devfeed.tech/topics/network.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [api-keys](<https://devfeed.tech/tags/api-keys.md>), [api-security](<https://devfeed.tech/tags/api-security.md>), [architecture](<https://devfeed.tech/tags/architecture.md>), [general](<https://devfeed.tech/tags/general.md>), [network](<https://devfeed.tech/tags/network.md>), [postman-passport](<https://devfeed.tech/tags/postman-passport.md>), [secret-store](<https://devfeed.tech/tags/secret-store.md>), [secrets](<https://devfeed.tech/tags/secrets.md>), [secrets-management](<https://devfeed.tech/tags/secrets-management.md>), [security](<https://devfeed.tech/tags/security.md>), [token](<https://devfeed.tech/tags/token.md>)

### AI overview

Postman Passport keeps real API secrets inside an organization's network by issuing credential references instead of exposing underlying keys. An internal proxy resolves the references, injects the credentials, and forwards requests while cryptographically binding references to their authorized holders.

### Source excerpt

Postman Passport grants API access using credential references, keeping the real secret inside your network. Here's how the architecture works. The post How Postman Passport keeps API secrets inside your network appeared first on Postman Blog.

## GitHub branch protection bypass can expose protected credentials to workflows

DevFeed: [GitHub branch protection bypass can expose protected credentials to workflows](<https://devfeed.tech/articles/working-as-unexpected-13341.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/working-as-unexpected>)

Published: 2024-05-31T00:00:00Z

Content type: opinion

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [GitHub](<https://devfeed.tech/topics/github.md>), [Security](<https://devfeed.tech/topics/security.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [code productivity](<https://devfeed.tech/topics/code-productivity.md>)

Tags: [branch-protection-rules](<https://devfeed.tech/tags/branch-protection-rules.md>), [github](<https://devfeed.tech/tags/github.md>), [github-branch-protections](<https://devfeed.tech/tags/github-branch-protections.md>), [new-branches](<https://devfeed.tech/tags/new-branches.md>), [protected-branches](<https://devfeed.tech/tags/protected-branches.md>), [release-branches](<https://devfeed.tech/tags/release-branches.md>), [release-workflow](<https://devfeed.tech/tags/release-workflow.md>), [secret-storage](<https://devfeed.tech/tags/secret-storage.md>), [secret-store](<https://devfeed.tech/tags/secret-store.md>), [secrets](<https://devfeed.tech/tags/secrets.md>), [security](<https://devfeed.tech/tags/security.md>), [security-best-practices](<https://devfeed.tech/tags/security-best-practices.md>), [use-of-github](<https://devfeed.tech/tags/use-of-github.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>), [workflows](<https://devfeed.tech/tags/workflows.md>)

### AI overview

The article describes a GitHub branch protection behavior that can allow a newly created branch to become protected and gain access to environment secrets through workflows. The author argues that this behavior can enable credential exfiltration and create risks for projects using wildcard branch protection rules, particularly release workflows.

### Source excerpt

Don't let the unexpected derail your projects. Read our guide on embracing uncertainty in software development and unlock new possibilities.