3 ms·
And still no tests in your codebase. This is absolutely ridiculous when it has been brought up in every past Show HN that you've done. I really really hope no
by iLoveOncall 3y ago
And still no tests in your codebase.
This is absolutely ridiculous when it has been brought up in every past Show HN that you've done.
I really really hope nobody is reckless enough to use a completely untested platform to manage secrets.
- mousetree 3y agoThere are tests: https://github.com/Infisical/infisical/blob/main/backend/tests/integration-tests/routes/v2/secrets.test.ts https://github.com/Infisical/infisical/blob/main/backend/tes... /s
- yjftsjthsd-h 3y ago... What did I just read? (But seriously, why would you ever have a file of what looks like at least some sort of tests but literally every line commented out?)
- NobleLie 3y agoBecause they theoretically worked at some point but now they do not.
- iLoveOncall 3y agoYou are obviously right but the question is still valid. They are using git and a deleted file is a one command away, so why keep the file but fully commented? IMO this highlights further bad engineering culture.
- rmbyrro 3y agoI was wondering whether this project is safe to trust my secrets. Thanks for saving me time. Besides, a challenge with secrets is hardware. Storing them on ordinary EC2 instances or else is insecure. That's why AWS Secrets, for example, use specialized hardware that are hardened for this use case.
- SilentNuke 3y ago> That's why AWS Secrets, for example, use specialized hardware that are hardened for this use case. I'm curious what your source is for this claim. I presume when you say AWS Secrets that you're referring to AWS Secrets Manager?