# tag: Identity
- ▸ delete-the-secret-dont-rotate-it.md · 21 aug 2026
Delete the secret, don't rotate it
GitGuardian found 64% of the valid secrets they reported to owners in 2022 were still working this January, and that 59% of compromised machines in their incident data were CI/CD runners. Rotation is losing. Azure DevOps has also put a date in the calendar: the old issuer for workload identity service connections retires on 1 July 2027. What to convert your service connections to, how to do the whole project in one pass, and the query that finds every secret you are still holding.
read → - ▸ identity-is-the-perimeter.md · 26 jul 2026
Identity is your security perimeter now
The firewall stopped being the front door a while ago. In a cloud estate, identity is where an attacker gets in or gets stopped, so it's where the design attention belongs.
read →