timeoutdigital / envars Goto Github PK

3.7 3.8 3.9 3.10 3.11

• we'd need to do this everywhere

• use of a 'default' secret is probably in error, prod and staging databases for example should have different passwords
• envars add and envars validate should at least warn about default secrets

this error probably means you're trying to decrypt a secret with the wrong app name

• we could use a tool like https://github.com/zricethezav/gitleaks as part of pre-commit and when actually adding vars using envars add
• trying to add a var with names like PASSWORD|TOKEN|KEY should at least warn the user if not outright error