> Also tools such as Airbrake or Sentry often send all your ENV variables to the error collection server, effectively exposing your secret values. That only ha

> Also tools such as Airbrake or Sentry often send all your ENV variables to the error collection server, effectively exposing your secret values. That only happens if whoever deployed those services screwed up badly and failed to configure any kind of filtering. I mean, airbrake specifically refers to their filtering system as best practices to avoid leak sensitive data. https://airbrake.io/product/security https://airbrake.io/product/security You're not commenting on a problem with env variables. You're commenting how poorly deployed and configured logging services can leak secrets.