Tag: #secrets

Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 2 posts

Secrets Management — Why a .env File Is Not Enough, the Paths Environment Variables Leak Through, and How to Design Rotation
Adding .env to .gitignore does not make a secret safe. The process environment is readable verbatim from the same host through /proc/PID/environ, it rides out in crash reports, debug pages and CI logs, and it stays forev
2026-07-26 · 16 min read #security #secrets #devops #vault #kubernetes
Where Developer Tokens Leak — The VSCode 1-Click Token Theft and Secret Hygiene
Dissecting the June 2026 case of one-click GitHub token theft through a VSCode bug, this post traces the paths along which tokens leak in developer environments. It covers PAT permission design, token rotation, secret sc
2026-06-12 · 15 min read #security #github #tokens #devops #secrets

Secrets Management — Why a .env File Is Not Enough, the Paths Environment Variables Leak Through, and How to Design Rotation