Getting Git Credentials Out of the URL

ACM.327 Attempting to use Git Credential Helper cache option in Lambda not working — alternate solution

Teri Radichel
Cloud Security
Published in
5 min readOct 1, 2023

--

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

⚙️ Check out my series on Automating Cybersecurity Metrics | Code.

🔒 Related Stories: AWS Security | GitHub Security | IAM

💻 Free Content on Jobs in Cybersecurity | ✉️ Sign up for the Email List

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

In the last post, I wrote about parsing Lambda functions and ensuring they meet a particular character set requirement to help prevent injection attacks such as cross-site scripting (XSS).

In this post I’m going to switch away from using the URL for Git credentials and instead use use the Git credential helper. I wrote about using the git credential helped by caching variables to ensure they are not stored to disk and why this option is my preferred option here:

--

--

Teri Radichel
Teri Radichel

Written by Teri Radichel

CEO 2nd Sight Lab | Penetration Testing & Assessments | AWS Hero | Masters of Infosec & Software Engineering | GSE 240 etc | IANS | SANS Difference Makers Award