Open-source tools detect workstation secrets before theft

Bagel, an open-source tool by Boost Security, scans developer workstations for secrets like SSH keys and cloud credentials. It outputs JSON findings without logging secrets. Fleet reads results via osquery, and failed policies trigger Slack notifications or block SSO through Entra Conditional Access until remediation.