we hide secrets in environment variables and call it secure 😅
Then platform gets compromised and suddenly every secret needs rotating
Environment variables are configuration 😎 not a security boundary.
Are we putting too much trust in our infrastructure providers?
commit a0142a4
Tried having this conversation. It wasn't easy. I gave up in the end, it's beyond my pay grade 🤷