appsec

335 readers

1 users here now

A community for all things related to application security.

founded 1 year ago

MODERATORS

laszlok@infosec.pub

GitHub Copilot, Amazon Code Whisperer emit people's API keys (www.theregister.com)

submitted 1 year ago by N7x@infosec.pub to c/appsec@infosec.pub

11 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] pixxelkick@lemmy.world 2 points 1 year ago

We load all secrets in from an instance of Hashicorp Vault we have running.

It's pretty easy API to use, has packages for most languages, has a solid docker image, and is compatible with pretty much every type of storage under the sun.

permalink
fedilink
source
parent