kodebeat / papers / security
One inventory of everything that expires, ranked by blast radius
An expiry inventory across certificates, secrets, keys and domains.
Builds a single inventory of everything in an estate with an expiry date, certificates, CAs, secrets, IAM keys, leases and domains, ranked so the certificate on the payment path outranks the one on a staging dashboard. Most of it is discovered; what cannot be is recorded by hand and ranked the same way. The ranking is the product, since any script can list dates.
What is in it
- The problem — what goes unanswered without it, and who notices first.
- Why the obvious alternative falls short — stated plainly, including where it is the better choice.
- How it works — the method, not a feature list.
- Concrete use cases — with console output quoted from the repository, never reconstructed.
- The methodology behind any number it emits — every term shown, so the figure survives a question.
- What it deliberately does not do — the section most papers leave out.
Part of the Security & supply chain theme.
Get the PDF
One email with the download link, and this paper already selected. No follow-up sequence.