When We Use AI To Ship Fast, Secrets Spread Fast
Blog post from GitGuardian
In 2025, the software development landscape underwent significant changes, as highlighted in the GitGuardian State of Secrets Sprawl Report, with a notable increase in the number of developers and the integration of AI into the software stack. GitHub saw a 33% rise in publicly active developers, leading to a surge in new code, projects, and leaked credentials, with AI becoming a crucial component of development processes. The report identified a 152% increase in leaked secrets since 2021, indicating that secrets are leaking faster than the developer base is growing. AI-related services saw an 81% year-over-year increase in leaked secrets, with 12 of the top 15 fastest-growing leaked secret types being AI services. Prominent AI platforms such as Deepseek, xAI, and OpenRouter exhibited significant growth in secret leaks, reflecting the mainstream adoption of production-grade model access. This shift has introduced new security risks as more services, tools, and machine identities are required, leading to increased credential leakage. Additionally, AI-assisted commits contributed to secrets sprawl, with AI-generated code often appearing finished before it's production-ready, exacerbating the issue of credential management. The report emphasizes that AI did not create the problem of secrets sprawl but has accelerated conditions that exacerbate it, highlighting the need for better lifecycle management of credentials as AI becomes an integral part of software production.
| Trend | Post Mentions | Total Month Mentions | Posts | Companies | MoM |
|---|---|---|---|---|---|
| Secrets Management | 35 | 1,821 | 338 | 111 | +22% |
| MCP | 10 | 6,108 | 613 | 170 | +36% |
| LLM | 3 | 5,932 | 1,046 | 223 | -2% |
| AI Agents | 1 | 4,430 | 1,100 | 236 | -3% |
| AI Coding Assistant | 1 | 1,480 | 382 | 153 | +18% |
| Real-time | 1 | 6,296 | 1,346 | 246 | -2% |
Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.