{"version":1,"type":"rich","provider_name":"Libsyn","provider_url":"https:\/\/www.libsyn.com","height":90,"width":600,"title":"SE Radio 722: Dwayne McDaniel on the Engineering Challenges of Secrets Management","description":"Dwayne McDaniel, developer advocate at GitGuardian.com, joins host Priyanka Raghavan to talk about the engineering challenges of secrets management. They explore what \u201csecrets\u201d really are in modern systems\u2014far beyond passwords\u2014including API keys, tokens, certificates, and machine identities, and how \u201csecret sprawl\u201d emerges across the SDLC. Drawing on reports from GitGuardian and Verizon, they discuss the growing scale of secret leaks and why credential abuse and phishing remain dominant attack vectors. They examine common leak points\u2014from code repos and logs to CI\/CD pipelines, containers, and SaaS integrations\u2014and how cloud, DevOps, and AI tooling are amplifying risks. Priyanka quizzes Dwayne about recent supply chain attacks from pyPi and trivy ecosystems, highlighting recurring root causes like poor access control, long-lived credentials, and weak security hygiene. Finally, they consider detection, response, and modern solutions\u2014short-lived credentials, secret scanning, and identity-based approaches like OWASP NHIR and SPIFFE\/SPIRE\u2014ending with practical advice for engineers to reduce blast radius and design for secure secret lifecycle management. ","author_name":"Software Engineering Radio - the podcast for professional software developers","author_url":"https:\/\/www.se-radio.net","html":"<iframe title=\"Libsyn Player\" style=\"border: none\" src=\"\/\/html5-player.libsyn.com\/embed\/episode\/id\/41445805\/height\/90\/theme\/custom\/thumbnail\/yes\/direction\/forward\/render-playlist\/no\/custom-color\/88AA3C\/\" height=\"90\" width=\"600\" scrolling=\"no\"  allowfullscreen webkitallowfullscreen mozallowfullscreen oallowfullscreen msallowfullscreen><\/iframe>","thumbnail_url":"https:\/\/assets.libsyn.com\/secure\/item\/41445805"}