4 ms·
mTLS aka TLS client certs seems like the way to go.
by pabs3 1y ago
mTLS aka TLS client certs seems like the way to go.
- orphea 1y agoHow is a client cert not another glorified static password? It would have been stolen from repo secrets the same way.
- pabs3 1y agoYou don't store them in repos on disk, but in a HSM so they can't be stolen, and then you protect signing access to them based on service/process information.