5 ms·
I was thinking about the same tool not long ago. It could be a way to include simple secrets in your configuration/deploy scripts without having to add an extra
by sly010 11y ago
I was thinking about the same tool not long ago.
It could be a way to include simple secrets in your configuration/deploy scripts without having to add an extra dependency on some arbitrary "vault" tool. OpenSSL is available everywhere.
- jjnoakes 11y agoExcept you need to type in the password to decrypt. So it still requires either storing that new secret (the password) somewhere (which defeats the purpose of using this technique to guard your secrets), or you need a human (which defeats the purpose of automated deployments).