Validity-Override API Tutorial: Confirm If a Leaked Secret Is Still Exploitable

GitGuardian's validity-override API lets security and engineering teams tell GitGuardian whether an exposed credential is actually valid, even when automatic checks mark it as Failed to Check.

Secrets tied to internal services, private APIs, or systems GitGuardian cannot reach often fall into this category. GitGuardian automatically validates most supported credential types, but when it cannot, teams can now perform their own validation and feed the result back into the platform.

In this tutorial, Dwayne walks through the process step by step: finding the incident ID, retrieving the secret_id, setting a validity override through the API, and removing that override when it is no longer needed.

At scale, knowing which exposed credentials are actually exploitable helps teams focus remediation where it matters most. It is one more way the GitGuardian Secrets + NHI Security platform helps teams detect, prioritize, and remediate secrets sprawl.

That validity result then informs filtering, severity, prioritization, and remediation workflows across the platform.

#GitGuardian #SecretsManagement #Cybersecurity #API #DevSecOps #SecretsDetection