{"id":34105,"date":"2023-01-26T11:49:45","date_gmt":"2023-01-26T11:49:45","guid":{"rendered":"https:\/\/digileaders.com\/?p=34105"},"modified":"2023-01-26T11:49:45","modified_gmt":"2023-01-26T11:49:45","slug":"how-safe-are-your-secrets","status":"publish","type":"post","link":"https:\/\/digileaders.com\/how-safe-are-your-secrets\/","title":{"rendered":"How safe are your secrets?"},"content":{"rendered":"

It is now widely accepted that data is a vital business asset, and with security features developing at a rapid rate, the importance of keeping up-to-speed with the best tools to use to protect an organisation\u2019s data should not be understated.<\/span><\/p>\n

Here, Informed Solutions\u2019 Lead Consultant James Cruddas considers the importance of data security and risk mitigation, and how <\/span>InformedENGINEERING\u00a9<\/span><\/a> is cultivating an environment where developers can deliver solutions that make our world safer, smarter, healthier, greener, and more secure.<\/span><\/p>\n

 <\/p>\n

Importance of data security<\/h3>\n

Ask an organisation to tell you their most valued asset and I can almost guarantee that, shortly after its people, data will be one of the most common responses you hear.\u00a0<\/span><\/p>\n

The ability of a business to convert data into actionable insight – regardless of sector, size, age, or the number of customers you serve \u2013 continues to be ever more important in maintaining competitive advantage, increasing customer satisfaction, and driving operational efficiency gains.<\/span><\/p>\n

This recognition, coupled with the legal need to safeguard personal information, has helped to remind people of the importance of data security. We see this evidenced by cloud providers enabling more secure configurations \u201cby design\u201d. They are also offering ever more sophisticated security features at more affordable price points than ever before. Take for example AWS, which by April 2023 will be <\/span>enabling block public access settings by default on S3 buckets<\/span><\/a>.<\/span><\/p>\n

 <\/p>\n

Risk and mitigation<\/h3>\n

Data has become increasingly acknowledged as \u201cbusiness gold\u201d and the digital vaults in which it is stored continue to grow stronger.\u00a0<\/span><\/p>\n

However, a vault built from titanium will open just as easily as one made of tin if you have its key. In data terms, when working with cloud technologies, physical keys are replaced with digital access tokens (be it for AWS, Azure, Google Cloud, or just about anything else). If you expose your access tokens you run a significant risk of exposing your data.<\/span><\/p>\n

I choose the example of access tokens intentionally, although the same applies to several other forms of secret. Anyone that has read the marketing materials for technologies such as Azure KeyVault, or AWS Secrets Manager might quickly jump to the conclusion they solve just about any credential handling problem you could imagine. Whilst yes, their use is best-practice, and they avoid credentials needing to be stored in plaintext, as they are instead fetched on-demand over REST, you still need to authenticate against these service\u2019s APIs. And to do that you will need an access token.<\/span><\/p>\n

Multi-factor Authentication (MFA) is an excellent choice for mitigating the threat of compromise but concerningly, studies as recent as November 2022 suggest a mere <\/span>26% of enterprise cloud users<\/span><\/a> from the sampled audience are taking advantage of the security benefits it brings. With such a low adoption rate for a relatively simple \u201cswitch-on\u201d security feature, more intricate solutions such as carefully crafted identity policies or making use of short-lived tokens, combined with role-based (or attribute-based) controls, is probably even more scarce.<\/span><\/p>\n

Back in 2019, a study at NCSU by <\/span>Meli et al.<\/span><\/a> highlighted that \u201cthousands of new, unique secrets are leaked every day\u201d in public GitHub repositories. If you\u2019re one of the 74% of enterprise cloud users not implementing MFA as a secondary layer of protection \u2013 this poses a very real threat to your data security. With engineers being aware of how sensitive these credentials can be – how are they still ending up in source code?<\/span><\/p>\n

The shortest possible answer I\u2019ve found to this question is just three words long\u2026 \u201cgit add dot\u201d. Whilst I strongly discourage use of this command, as even the best .gitignore files can\u2019t catch everything, you will struggle to find an engineer who has not at some point used this to reduce the time needed to prepare commit contents. The command recursively adds <\/span>all<\/b> changes made in the current directory and below in just one foul swoop. This includes newly created files, updates, removals, and everything in-between. Compounding risks to its use, if you omit the \u201c–untracked-files\u201d flag when running a \u201cgit status\u201d check, you\u2019ll just be shown a printout of the folder names that are now destined for source control – not details of the individual files inside them. That \u201ctemp.txt\u201d file an engineer put their access keys in whilst working on a series of complex CLI commands might never have been intended for source control\u2026 but “git add . [dot]\u201d doesn\u2019t care!<\/span><\/p>\n

 <\/p>\n

How can development teams protect themselves?<\/h3>\n

I\u2019m pleased to say several advances have been made in this space over recent years. In December 2022, GitHub made its secret scanning feature that previously sat behind an enterprise subscription paywall <\/span>free for all public repositories<\/span><\/a>. That said, whilst this early Christmas present might have brought a smile to the face of any security-conscious developer, an enterprise subscription is still needed if you want to keep your private repositories secret-free. I would also argue that, as generous this might be, only finding out your credentials have been exposed once they are out in the wild is a little too late! To underscore this argument; research published back in late 2020 suggests it can take as little as <\/span>one minute<\/span><\/a> for hackers to begin using exposed credentials for exploit attempts.<\/span><\/p>\n

Fortunately, there are several tools that can help with stopping credentials going into source code in the first place. Snyk for example, when using its local CLI, supports, as part of its wider ecosystem, the ability to proactively check for credentials in source code from your local machine. Alongside commercial offerings, there are open-source alternatives such as GitLeaks, GittyLeaks, git-secrets, Trufflehog, and Whispers just to name a few.<\/span><\/p>\n

At Informed, we use open-source a lot and have made use of TruffleHog OSS on several recent projects as part of our toolchain alongside other complementary provider-specific tools. After reaching out to members of our Service Engineering Community of Practice to gather feedback from our engineers (it was important that everyone be involved in the selection process as they will be the ones using tools), we felt this choice was the best fit for our use-case. At the risk of sounding like a footnote to a financial or legal newsletter \u2013 please be aware this does not represent formal advice \u2013 it\u2019s simply what works for us!<\/span><\/p>\n

In April 2022 TruffleHog overhauled its implementation under a new V3 re-design. Alongside other improvements, looking at the tool\u2019s <\/span>source code<\/span><\/a>, it would seem the maintainers have taken the regex recommendations made by Meli et al. to heart. Combined with its Docker container support, and there being no need for license keys or server-side hub, we feel it provides a simple, portable solution.\u00a0<\/span><\/p>\n

Owing in large part to its container support, the tool can run both locally and in serverless CI contexts such as GitHub Actions. The validation feature which tests suspected credentials against 700+ provider types to see if they are genuine, rather than something that just looks like a credential, also goes a long way in preventing \u201calarm fatigue\u201d by filtering out false positives.\u00a0<\/span><\/p>\n

Finally – by binding the tool\u2019s CLI to git pre-commit hooks and instructing a scan to run each time files are staged it becomes straightforward to deploy a multi-layered credential scanning solution that can run on both engineer\u2019s local machines. This it to prevent secrets from entering source control in the first place, as well as on commits being pushed using CI. It\u2019s always nice to have a fallback!<\/span><\/p>\n

I\u2019m not saying these types of automated tools are a replacement for understanding and practicing secure software development but as an engineer myself – it\u2019s nice to know there\u2019s a safety net there just in case! As the saying goes \u201cI\u2019d rather have it and not need it, than need it and not have it\u201d.<\/span><\/p>\n

I hope this article proves useful – whether it inspires you to improve your own development tooling and practices or simply filled 15 minutes of your lunchtime knowledge-quest with some food for thought. If you\u2019re a like-minded individual who enjoys applying automation to help make engineering team\u2019s lives more comfortable – feel free to connect with me on <\/span>LinkedIn<\/span><\/a> and let me know your thoughts on the topic.\u00a0<\/span><\/p>\n

Our team is also always open to discussing potential opportunities of a <\/span>career<\/span><\/a> at Informed if these are the types of things that get you out of bed in the morning!<\/span><\/p>\n

\n

More thought leadership <\/i><\/a><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

It is now widely accepted that data is a vital business asset, and with security features developing at a rapid rate, the importance of keeping up-to-speed with the best tools to use to protect an organisation\u2019s data should not be understated. Here, Informed Solutions\u2019 Lead […]<\/p>\n","protected":false},"author":51,"featured_media":34107,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"class_list":["post-34105","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","topic-cyber-security","topic-ai","topic-transformation"],"acf":[],"yoast_head":"\nHow safe are your secrets? | Digital Leaders<\/title>\n<meta name=\"description\" content=\"It is now widely accepted that data is a vital business asset, and with security features developing at a rapid rate, the importance of keeping up-to-speed with the best tools to use to protect an organisation\u2019s data should not be understated.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/digileaders.com\/how-safe-are-your-secrets\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How safe are your secrets?\" \/>\n<meta property=\"og:description\" content=\"It is now widely accepted that data is a vital business asset, and with security features developing at a rapid rate, the importance of keeping up-to-speed with the best tools to use to protect an organisation\u2019s data should not be understated.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/digileaders.com\/how-safe-are-your-secrets\/\" \/>\n<meta property=\"og:site_name\" content=\"Digital Leaders\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/digitalleadersprogramme\" \/>\n<meta property=\"article:published_time\" content=\"2023-01-26T11:49:45+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/digileaders.com\/wp-content\/uploads\/2023\/01\/shutterstock_1834912495-scaled-e1674733214821.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"533\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Louise Westcott\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"How safe are your secrets?\" \/>\n<meta name=\"twitter:description\" content=\"It is now widely accepted that data is a vital business asset, and with security features developing at a rapid rate, the importance of keeping up-to-speed with the best tools to use to protect an organisation\u2019s data should not be understated.\" \/>\n<meta name=\"twitter:creator\" content=\"@DigiLeaders\" \/>\n<meta name=\"twitter:site\" content=\"@DigiLeaders\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Louise Westcott\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/digileaders.com\/how-safe-are-your-secrets\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/digileaders.com\/how-safe-are-your-secrets\/\"},\"author\":{\"name\":\"Louise Westcott\",\"@id\":\"https:\/\/digileaders.com\/#\/schema\/person\/50d407d47f6db15304462e27d166bef1\"},\"headline\":\"How safe are your secrets?\",\"datePublished\":\"2023-01-26T11:49:45+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/digileaders.com\/how-safe-are-your-secrets\/\"},\"wordCount\":1423,\"publisher\":{\"@id\":\"https:\/\/digileaders.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/digileaders.com\/how-safe-are-your-secrets\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/digileaders.com\/wp-content\/uploads\/2023\/01\/shutterstock_1834912495-scaled-e1674733214821.jpg\",\"inLanguage\":\"en-GB\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/digileaders.com\/how-safe-are-your-secrets\/\",\"url\":\"https:\/\/digileaders.com\/how-safe-are-your-secrets\/\",\"name\":\"How safe are your secrets? | Digital Leaders\",\"isPartOf\":{\"@id\":\"https:\/\/digileaders.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/digileaders.com\/how-safe-are-your-secrets\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/digileaders.com\/how-safe-are-your-secrets\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/digileaders.com\/wp-content\/uploads\/2023\/01\/shutterstock_1834912495-scaled-e1674733214821.jpg\",\"datePublished\":\"2023-01-26T11:49:45+00:00\",\"description\":\"It is now widely accepted that data is a vital business asset, and with security features developing at a rapid rate, the importance of keeping up-to-speed with the best tools to use to protect an organisation\u2019s data should not be understated.\",\"breadcrumb\":{\"@id\":\"https:\/\/digileaders.com\/how-safe-are-your-secrets\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/digileaders.com\/how-safe-are-your-secrets\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/digileaders.com\/how-safe-are-your-secrets\/#primaryimage\",\"url\":\"https:\/\/digileaders.com\/wp-content\/uploads\/2023\/01\/shutterstock_1834912495-scaled-e1674733214821.jpg\",\"contentUrl\":\"https:\/\/digileaders.com\/wp-content\/uploads\/2023\/01\/shutterstock_1834912495-scaled-e1674733214821.jpg\",\"width\":800,\"height\":533,\"caption\":\"Cyber,Security,And,Network,Protection,With,Cybersecurity,Expert,Working,On\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/digileaders.com\/how-safe-are-your-secrets\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/digileaders.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How safe are your secrets?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/digileaders.com\/#website\",\"url\":\"https:\/\/digileaders.com\/\",\"name\":\"Digital Leaders\",\"description\":\"We Lead Transformation\",\"publisher\":{\"@id\":\"https:\/\/digileaders.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/digileaders.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/digileaders.com\/#organization\",\"name\":\"Digital Leaders\",\"url\":\"https:\/\/digileaders.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/digileaders.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/digileaders.com\/wp-content\/uploads\/2016\/07\/Digital-Leaders\u00ae-logo.jpg\",\"contentUrl\":\"https:\/\/digileaders.com\/wp-content\/uploads\/2016\/07\/Digital-Leaders\u00ae-logo.jpg\",\"width\":3000,\"height\":2992,\"caption\":\"Digital Leaders\"},\"image\":{\"@id\":\"https:\/\/digileaders.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/digitalleadersprogramme\",\"https:\/\/x.com\/DigiLeaders\",\"https:\/\/www.linkedin.com\/groups\/6527637\/\",\"https:\/\/www.youtube.com\/channel\/UCK1pUziPGg9J8R1S0FhBgiQ\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/digileaders.com\/#\/schema\/person\/50d407d47f6db15304462e27d166bef1\",\"name\":\"Louise Westcott\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/digileaders.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/8269a87a68787a5652e9bbbd9e81282f6d74f763288a3268a2e3277baf66c40d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/8269a87a68787a5652e9bbbd9e81282f6d74f763288a3268a2e3277baf66c40d?s=96&d=mm&r=g\",\"caption\":\"Louise Westcott\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How safe are your secrets? | Digital Leaders","description":"It is now widely accepted that data is a vital business asset, and with security features developing at a rapid rate, the importance of keeping up-to-speed with the best tools to use to protect an organisation\u2019s data should not be understated.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/digileaders.com\/how-safe-are-your-secrets\/","og_locale":"en_GB","og_type":"article","og_title":"How safe are your secrets?","og_description":"It is now widely accepted that data is a vital business asset, and with security features developing at a rapid rate, the importance of keeping up-to-speed with the best tools to use to protect an organisation\u2019s data should not be understated.","og_url":"https:\/\/digileaders.com\/how-safe-are-your-secrets\/","og_site_name":"Digital Leaders","article_publisher":"https:\/\/www.facebook.com\/digitalleadersprogramme","article_published_time":"2023-01-26T11:49:45+00:00","og_image":[{"width":800,"height":533,"url":"https:\/\/digileaders.com\/wp-content\/uploads\/2023\/01\/shutterstock_1834912495-scaled-e1674733214821.jpg","type":"image\/jpeg"}],"author":"Louise Westcott","twitter_card":"summary_large_image","twitter_title":"How safe are your secrets?","twitter_description":"It is now widely accepted that data is a vital business asset, and with security features developing at a rapid rate, the importance of keeping up-to-speed with the best tools to use to protect an organisation\u2019s data should not be understated.","twitter_creator":"@DigiLeaders","twitter_site":"@DigiLeaders","twitter_misc":{"Written by":"Louise Westcott","Estimated reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/digileaders.com\/how-safe-are-your-secrets\/#article","isPartOf":{"@id":"https:\/\/digileaders.com\/how-safe-are-your-secrets\/"},"author":{"name":"Louise Westcott","@id":"https:\/\/digileaders.com\/#\/schema\/person\/50d407d47f6db15304462e27d166bef1"},"headline":"How safe are your secrets?","datePublished":"2023-01-26T11:49:45+00:00","mainEntityOfPage":{"@id":"https:\/\/digileaders.com\/how-safe-are-your-secrets\/"},"wordCount":1423,"publisher":{"@id":"https:\/\/digileaders.com\/#organization"},"image":{"@id":"https:\/\/digileaders.com\/how-safe-are-your-secrets\/#primaryimage"},"thumbnailUrl":"https:\/\/digileaders.com\/wp-content\/uploads\/2023\/01\/shutterstock_1834912495-scaled-e1674733214821.jpg","inLanguage":"en-GB"},{"@type":"WebPage","@id":"https:\/\/digileaders.com\/how-safe-are-your-secrets\/","url":"https:\/\/digileaders.com\/how-safe-are-your-secrets\/","name":"How safe are your secrets? | Digital Leaders","isPartOf":{"@id":"https:\/\/digileaders.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/digileaders.com\/how-safe-are-your-secrets\/#primaryimage"},"image":{"@id":"https:\/\/digileaders.com\/how-safe-are-your-secrets\/#primaryimage"},"thumbnailUrl":"https:\/\/digileaders.com\/wp-content\/uploads\/2023\/01\/shutterstock_1834912495-scaled-e1674733214821.jpg","datePublished":"2023-01-26T11:49:45+00:00","description":"It is now widely accepted that data is a vital business asset, and with security features developing at a rapid rate, the importance of keeping up-to-speed with the best tools to use to protect an organisation\u2019s data should not be understated.","breadcrumb":{"@id":"https:\/\/digileaders.com\/how-safe-are-your-secrets\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/digileaders.com\/how-safe-are-your-secrets\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/digileaders.com\/how-safe-are-your-secrets\/#primaryimage","url":"https:\/\/digileaders.com\/wp-content\/uploads\/2023\/01\/shutterstock_1834912495-scaled-e1674733214821.jpg","contentUrl":"https:\/\/digileaders.com\/wp-content\/uploads\/2023\/01\/shutterstock_1834912495-scaled-e1674733214821.jpg","width":800,"height":533,"caption":"Cyber,Security,And,Network,Protection,With,Cybersecurity,Expert,Working,On"},{"@type":"BreadcrumbList","@id":"https:\/\/digileaders.com\/how-safe-are-your-secrets\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/digileaders.com\/"},{"@type":"ListItem","position":2,"name":"How safe are your secrets?"}]},{"@type":"WebSite","@id":"https:\/\/digileaders.com\/#website","url":"https:\/\/digileaders.com\/","name":"Digital Leaders","description":"We Lead Transformation","publisher":{"@id":"https:\/\/digileaders.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/digileaders.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/digileaders.com\/#organization","name":"Digital Leaders","url":"https:\/\/digileaders.com\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/digileaders.com\/#\/schema\/logo\/image\/","url":"https:\/\/digileaders.com\/wp-content\/uploads\/2016\/07\/Digital-Leaders\u00ae-logo.jpg","contentUrl":"https:\/\/digileaders.com\/wp-content\/uploads\/2016\/07\/Digital-Leaders\u00ae-logo.jpg","width":3000,"height":2992,"caption":"Digital Leaders"},"image":{"@id":"https:\/\/digileaders.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/digitalleadersprogramme","https:\/\/x.com\/DigiLeaders","https:\/\/www.linkedin.com\/groups\/6527637\/","https:\/\/www.youtube.com\/channel\/UCK1pUziPGg9J8R1S0FhBgiQ"]},{"@type":"Person","@id":"https:\/\/digileaders.com\/#\/schema\/person\/50d407d47f6db15304462e27d166bef1","name":"Louise Westcott","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/digileaders.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/8269a87a68787a5652e9bbbd9e81282f6d74f763288a3268a2e3277baf66c40d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/8269a87a68787a5652e9bbbd9e81282f6d74f763288a3268a2e3277baf66c40d?s=96&d=mm&r=g","caption":"Louise Westcott"}}]}},"_links":{"self":[{"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/posts\/34105","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/users\/51"}],"replies":[{"embeddable":true,"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/comments?post=34105"}],"version-history":[{"count":0,"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/posts\/34105\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/media\/34107"}],"wp:attachment":[{"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/media?parent=34105"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}