Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use a secret or password manager instead of *.env files #302

Open
spenserblack opened this issue Jan 23, 2024 · 0 comments
Open

Use a secret or password manager instead of *.env files #302

spenserblack opened this issue Jan 23, 2024 · 0 comments
Labels
enhancement New feature or request help wanted Extra attention is needed

Comments

@spenserblack
Copy link
Owner

Having secrets in plain text is pretty bad. It's a bit mitigated by the fact that dotenv allows for command substitutions (see example below), but that doesn't change the fact that this tool is kind of encouraging putting secrets in plain text in your home directory.

Command substition example

MY_TOKEN=$(gh auth token)
@spenserblack spenserblack added help wanted Extra attention is needed enhancement New feature or request labels Jan 23, 2024
@github-project-automation github-project-automation bot moved this to Triage in repofetch Jan 23, 2024
@spenserblack spenserblack moved this from Triage to Todo in repofetch Jan 23, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request help wanted Extra attention is needed
Projects
Status: Todo
Development

No branches or pull requests

1 participant