4 ms·
You are just reducing the blast radius with use of podman; you will likely need secrets for your app to work, which will be exposed regardless of the podman app
by roozbeh18 10mo ago
You are just reducing the blast radius with use of podman; you will likely need secrets for your app to work, which will be exposed regardless of the podman approach.
- deleted 10mo ago[deleted]
- Aeolun 10mo agoMost people don’t have NPM keys in their application containers.
- XorNot 10mo agoIf you're developing in a container then you would have to be doing it without doing something like say, mounting your home directory into it. The reality here is this is the sort of attack SELinux should be good at stopping (it's not because no one uses SELinux, the policies most commonly used don't confine the user profile in a useful way, and a whole bunch of tools love ambient credentials in environment variables).