Tracebit has today launched its Open Source Program. This provides unlimited free canary credentials for maintainers to use across all their public open-source repositories.
Docker, ClickHouse, and Redis are the first participants, and program is open to maintainers of projects of every size.
Tracebit has established this because trusted development tools are in the cross hairs of threat actors, and security canaries can play a vital role in keeping open source projects safe. Placing canary credentials into a workflow’s build environment, alongside the places an attacker would look for real credentials acts as ‘bait’ for an attacker – any unexpected use is a signal of compromise.
To take part organizations need to sign up for Tracebit Community Edition and advise them they maintain open-source projects. Tracebit will then enable unlimited canary credentials for those repositories. In return, participants are required to display a “Protected by Tracebit” badge in their repository READMEs, helping other maintainers discover the program.
For more information see these two blogs live today: https://tracebit.com/blog/announcing-tracebit-open-source-program and https://tracebit.com/open-source-program
Tracebit Launches Open Source Program
Posted in Commentary with tags Tracebit on October 15, 2026 by itnerdTracebit has today launched its Open Source Program. This provides unlimited free canary credentials for maintainers to use across all their public open-source repositories.
Docker, ClickHouse, and Redis are the first participants, and program is open to maintainers of projects of every size.
Tracebit has established this because trusted development tools are in the cross hairs of threat actors, and security canaries can play a vital role in keeping open source projects safe. Placing canary credentials into a workflow’s build environment, alongside the places an attacker would look for real credentials acts as ‘bait’ for an attacker – any unexpected use is a signal of compromise.
To take part organizations need to sign up for Tracebit Community Edition and advise them they maintain open-source projects. Tracebit will then enable unlimited canary credentials for those repositories. In return, participants are required to display a “Protected by Tracebit” badge in their repository READMEs, helping other maintainers discover the program.
For more information see these two blogs live today: https://tracebit.com/blog/announcing-tracebit-open-source-program and https://tracebit.com/open-source-program
Leave a comment »