Discussion

Ask HN: Do you read Secrets from Environment Variables

The Command Line Interface Guidelines [1] says:

> Do not read secrets from environment variables

> Secrets should only be accepted via credential files, pipes, `AF_UNIX` sockets, secret management services, or another IPC mechanism

Which one of these do you use? On github it seems common for projects to use environment variables for secrets.

Do you use secret management services for work only, or do you use them in your personal projects too?

[1] https://clig.dev/#environment-variables

4 points tester457 2 years ago 7 comments

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton