Not put them in plain-text :shrug: I wrote a small utility to do this (https://www.npmjs.com/package/@qnzl/lockbox https://www.npmjs.com/package/@qnzl/lockbox)

Not put them in plain-text :shrug: I wrote a small utility to do this (https://www.npmjs.com/package/@qnzl/lockbox https://www.npmjs.com/package/@qnzl/lockbox) and it behaves similar to `pass` by using gpg encryption. I wrote it because I was doing a lot of programming streaming and I kept exposing secrets. So rather than having a .profile that is: GITHUB_TOKEN="steal this" It's GITHUB_TOKEN=$(lockbox product/dev/githubToken) Then you `source` it and your secrets are in your environment without putting them into plain-text.