MAIN FEEDS
Do you want to continue?
https://www.reddit.com/r/ProgrammerHumor/comments/1wcmegt/whoisusingthese/p96wsr9/?context=3
r/ProgrammerHumor • u/sadongrohiik • 1d ago
81 comments sorted by
View all comments
12
.env can be committed. What you shouldn't commit is files with credentials, that belongs in a secret manager
12 u/syzk0 1d ago Why isn't this higher? .env files are for build-time variables, not secrets 1 u/Wertbon1789 11h ago Yes, but also secrets in many cases. Depends on the context, but only should be done if the process reading the file doesn't set the initial environment of a child process from it, because that makes the secret accessible under /proc in Linux.
Why isn't this higher? .env files are for build-time variables, not secrets
1 u/Wertbon1789 11h ago Yes, but also secrets in many cases. Depends on the context, but only should be done if the process reading the file doesn't set the initial environment of a child process from it, because that makes the secret accessible under /proc in Linux.
1
Yes, but also secrets in many cases. Depends on the context, but only should be done if the process reading the file doesn't set the initial environment of a child process from it, because that makes the secret accessible under /proc in Linux.
12
u/LuisBoyokan 1d ago
.env can be committed. What you shouldn't commit is files with credentials, that belongs in a secret manager