The session opened with a live demonstration of an API key leak using the commit history of a real GitHub repository, immediately highlighting the importance of secure development practices and setting the context for the topics that followed.

Five common developer security mistakes were demonstrated and addressed through live examples:

• API Key Leakage – Prevented using .env files and proper .gitignore configurations.

• Dependency Vulnerabilities – Identified and remediated using npm audit fix and Snyk.

• Sensitive Data in Commit History – Addressed using git rm --cached and clean commit practices.

• Lack of Containerization / Inconsistent Environments – Resolved by creating a Dockerfile from scratch and demonstrating application deployment using Docker.

• Overly Permissive Exposure through git add . – Highlighted as one of the most common beginner mistakes and discussed best practices to avoid accidental commits.

The session concluded with a brief introduction to AI and LLM security, covering concepts such as prompt injection attacks and the OWASP LLM Top 10. This segment connected directly to the AI-based projects developed by students during Session 1, providing a practical perspective on emerging security challenges in AI applications.

Additional Activity: An interactive quiz was conducted at the end of the workshop to reinforce key concepts related to secure development practices and common security pitfalls. The top two performers were awarded official GDG backpacks in recognition of their participation and outstanding performance.