I defer to using AWS SSM to retrieve secrets https://github.com/kaihendry/dotfiles/blob/master/bin/ssm https://github.com/kaihendry/dotfiles/blob/master/bin/ssm

I defer to using AWS SSM to retrieve secrets https://github.com/kaihendry/dotfiles/blob/master/bin/ssm https://github.com/kaihendry/dotfiles/blob/master/bin/ssm But yeah, reading secrets of env or ps or the clipboard is a real issue, so I focus on making sure that doesn't leak. I've made terrible mistakes leading /proc accidentally in my Web app https://github.com/securego/gosec/issues/569 https://github.com/securego/gosec/issues/569