Review: GitGuardian's State of Secrets Sprawl 2026 Turned into Secret-Handling Guardrails for Drupal and WordPress Teams Usin...

GitGuardian's State of Secrets Sprawl 2026 reports 28.6M+ new secrets detected in public GitHub commits in 2025 (up 34% YoY), with AI-assisted commits leaking at 2x the baseline and 24,008 unique secrets found in MCP configuration files. For Drupal and WordPress teams, the report argues that secret boundaries now extend far beyond repositories to AI tool configs, CI runners, collaboration tools, and support workflows. The recommended shift is to treat secret handling as a workflow control system with concrete guardrails—especially banning plaintext credentials in AI tool configs and requiring environment-variable-based credential injection.