3 ms·
Sorry, i put all secrets in my code. I don't need 12 factors at all. It's super easy to deploy to multiple environments, because code is single source of truth
by revskill 3y ago
Sorry, i put all secrets in my code. I don't need 12 factors at all.
It's super easy to deploy to multiple environments, because code is single source of truth.
- Aurornis 3y agoSecrets in code is bad practice because it puts the secrets in source control and gives them to anyone with access to the code. You separate out the secrets to keep them secret.
- revskill 3y agoNext evolution of Git should automatically introspect the code base for comment to leaving out all "secrets". My point is, make the code easy to clone in a runnable shape wihtout any hacking on host system.
- gdprrrr 3y agoYou can configure GitLab to reject the push if you comitted secrets, based on regex marching with common formats for tokens.
- pjs_ 3y agoHell yeah brother. Move fast and break things philosophy
- porsager 3y agoIt's not a problem. Here you go: https://github.com/AGWA/git-crypt https://github.com/AGWA/git-crypt
- samus 3y agoThis only works if secrets are frequently rotated and contain enough entropy. Else, all secrets will eventually be decrypted from leaked repositories and distribution artifacts.
- brodouevencode 3y agoWhat company do you work for? I'd like to cancel my subscription. Seriously...bad idea. One repo leak or even one bad copy/paste in StackOverflow and you're done.