Tracebit has today launched its Open Source Program. This provides unlimited free canary credentials for maintainers to use across all their public open-source repositories.
Docker, ClickHouse, and Redis are the first participants, and program is open to maintainers of projects of every size.
Tracebit has established this because trusted development tools are in the cross hairs of threat actors, and security canaries can play a vital role in keeping open source projects safe. Placing canary credentials into a workflow’s build environment, alongside the places an attacker would look for real credentials acts as ‘bait’ for an attacker – any unexpected use is a signal of compromise.
To take part organizations need to sign up for Tracebit Community Edition and advise them they maintain open-source projects. Tracebit will then enable unlimited canary credentials for those repositories. In return, participants are required to display a “Protected by Tracebit” badge in their repository READMEs, helping other maintainers discover the program.
For more information see these two blogs live today: https://tracebit.com/blog/announcing-tracebit-open-source-program and https://tracebit.com/open-source-program
Related
This entry was posted on October 15, 2026 at 1:46 pm and is filed under Commentary with tags Tracebit. You can follow any responses to this entry through the RSS 2.0 feed.
You can leave a response, or trackback from your own site.
Tracebit Launches Open Source Program
Tracebit has today launched its Open Source Program. This provides unlimited free canary credentials for maintainers to use across all their public open-source repositories.
Docker, ClickHouse, and Redis are the first participants, and program is open to maintainers of projects of every size.
Tracebit has established this because trusted development tools are in the cross hairs of threat actors, and security canaries can play a vital role in keeping open source projects safe. Placing canary credentials into a workflow’s build environment, alongside the places an attacker would look for real credentials acts as ‘bait’ for an attacker – any unexpected use is a signal of compromise.
To take part organizations need to sign up for Tracebit Community Edition and advise them they maintain open-source projects. Tracebit will then enable unlimited canary credentials for those repositories. In return, participants are required to display a “Protected by Tracebit” badge in their repository READMEs, helping other maintainers discover the program.
For more information see these two blogs live today: https://tracebit.com/blog/announcing-tracebit-open-source-program and https://tracebit.com/open-source-program
Share this:
Like this:
Related
This entry was posted on October 15, 2026 at 1:46 pm and is filed under Commentary with tags Tracebit. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.