VELES

Summary from the TLDR InfoSec newsletter

Veles is Google's new open-source secret scanner. Built as a standalone module within the OSV-SCALIBR ecosystem, it was designed to detect leaked credentials in source code and artifacts. It currently supports the detection of GCP API keys, GCP service account keys, and RubyGems API keys. Veles is actively used at Google to scan internal repositories and powers credential detection for deps.dev's hundreds of millions of open-source packages. The tool will be integrated into Google Cloud services, including Artifact Registry and Security Command Center, with a future roadmap including expanded secret detection types, automated validation, and remediation workflows.