3 ms·
I don't get why you would have PRODUCTION secrets in those local .env files. It should only be dev tokens.
by tiku 1mo ago
I don't get why you would have PRODUCTION secrets in those local .env files. It should only be dev tokens.
- bukershok 1mo agoI can't agree more.
- hnlmorg 1mo agoThis isn't just for local .env files. It can be quite common to need production tokens for cloud systems if you job requires any amount of ops. eg doing anything aws cli work may result in a token stored in ~/.aws But even that aside, there's still merit in protecting rogue processes from trashing your non-production environments