Let's Discuss the Potential for Vulnerability Here: Why you should check your secrets into Git | Warren Parad (55:08)
Let's Discuss the Potential for Vulnerability Here: Why you should check your secrets into Git | Warren Parad (55:08)
Slides - https://authress.io/l/codemotion
Conference: Codemotion Madrid 2023 https://talks.codemotion.com/why-you-...
Can someone recommend a more secure method? I've been told many times that using git for secret management would present a potential vulnerability.
2
comments
Yeah this sounds like a bad idea, git isn't encrypted
You could use a password manager or somewhere safe to store the secret, then just point to that reference. Storing sensitive secrets/passwords/etc in a safe way is still up for debate imo