Delete Buildkite job logs

Enable incident responders to clean Buildkite logs that would be leaking secrets in the clear at scale. Deleting hundreds of job logs would be a very tedious job to do and not the best usage of time. Using a Tines page, an incident responder can input the details about the Buildkite pipeline and the story will clean all the respective logs within a couple of minutes. The other part of the story is leveraging Entro. Entro is a tool used to detect leaked secrets across various platforms. Entro users can fully automate the remediation by leveraging this story to automatically delete Buidlkite logs whenever a secret could have been leaked within such logs. All audit trails of this investigation will be stored in an Elasticsearch case.

Community author

Christopher Cutajar at Elastic