Isn't this "echo with more steps"? The CI/CD example [1] strikes me as not obviously better than doing cat > .env << EOF DATABASE_URL=${{ s

Isn't this "echo with more steps"? The CI/CD example [1] strikes me as not obviously better than doing cat > .env << EOF DATABASE_URL=${{ secrets.TEST_DATABASE_URL }} STRIPE_API_KEY=${{ secrets.STRIPE_TEST_KEY }} EOF which also addresses the trust and rotation problems. I suppose for dev secrets those are annoying, but even with secretspec you would have to rotate dev secrets when someone is offboarded. [1] https://devenv.sh/blog/2025/07/21/announcing-secretspec-declarative-secrets-management/#2-cicd-github-actions https://devenv.sh/blog/2025/07/21/announcing-secretspec-decl...