Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

That's why I consider writing any secrets into code base a security malpractice. Just for a minute or I am sure I won't commit it, is not an excuse.

Use environment variables or better yet - store the secret on the disk outside of your repo and make the code read it. It's a one liner in plenty of languages.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: