On Lazy Secrets Management
🫧 Open on Bubbles If the monitor you’re looking at right now has a sticky note with any of your passwords – please, get rid of it (note, not monitor) and change that password. This text can wait, don’t worry. Now, how bad is doing the same in your Git repository? I bet some of you still commit a full .env file, even though you know it’s not a good idea. Or maybe you don’t (yay!) , but when a new team member is onboarded, you send them it via Slack or email? In the end, they have to somehow get it, right? If
评论
?
参与讨论