47 questions
Best practices
0
votes
2
replies
58
views
Mitigating damage to Vault secrets in the circumstance of compromise
I have one hashicorp vault instance running in a container. My app authenticates against this with approle auth, and requests the secrets at runtime. The secrets include keys that can not be created ...
1
vote
1
answer
54
views
Github Actions secret name as a parameter [duplicate]
I want to create a workflow that can be manually triggered. It has multiple ssh private keys stored as secrets, and the user could choose any of them by passing their name into one of the workflow's ...
- 23
-1
votes
2
answers
424
views
Python hvac implementation to retrieve secrets [closed]
I am working on a Python sample code for the first time. This is about how to retrieve secrets from Hashicorp Vault secrets manager API; hvac.client.secrets.kv.v2, my code is as follows:
# 1. Setup ...
- 1
0
votes
0
answers
284
views
Azure Container Apps: Environment Variable Not Populated from Secret Reference Despite Correct Secret and Deployment
I'm deploying a .NET 9 API to Azure Container Apps using GitHub Actions. I want to inject a database connection string as an environment variable using a secret reference. My GitHub workflow sets the ...
- 103
0
votes
1
answer
206
views
How do I copy secret to Environment variable in jenkins?
I have a secret key stored in Jenkins Secret String.
I am trying to set it as environment variable, however, it doesn't work
withCredentials([string(credentialsId: 'SECRET_KEY', variable: 'SECRET_KEY')...
- 1,681
0
votes
1
answer
153
views
Error deploying Firebase Functions with Github Actions : secrets/XXXX:setIamPolicy 403, Permission 'secretmanager.secrets.setIamPolicy' denied
I have an issue deploying Firebase Functions using Github Actions after making 2 changes :
upgrading my functions from 1st Gen to 2nd Gen
switching to use Firebase Secrets instead of functions config
...
2
votes
0
answers
107
views
Secret detection does not work with sonarqube community edition 25.3.0 on macos x86_64 for file type ini, config, pem files
I was checking sonarqube community edition 25.3.0 on macos x86_64 and found that secret detection does not work . can someone please clarify if secret detection is available in community edition ? if ...
- 264
1
vote
0
answers
604
views
How do I correctly use the 1Password CLI op command to open the Bruno API client with an .env file that contains my secrets?
I have an environment file .env for my bruno collection. There I defined one envirnoment variable called API_KEY. The value of this variable is a reference to a 1Password secret e.g. op://Private/...
- 121
0
votes
0
answers
277
views
Ensure Private Key Environment Variables NextJS are private next.config.js
I'm implementing a "Contact Us" email functionality where I need environment variables for sensitive information such as a username and password for email authentication PRIVATE_KEY and a ...
-1
votes
1
answer
346
views
Pulling AWS Parameter Store secrets into a deployed Dockerized app on EC2
I have a Node.js app running inside a Docker container on an EC2 instance. The app uses environment variables. I found that AWS Parameter Store is recommended for securely managing secrets, so I ...
- 69
0
votes
1
answer
437
views
How can I set up secrets with GKE?
I have a .env file of many of the secrets used in a python container running on GKE, but os.getenv() always returns None. Is it possible to load these secrets into GKE, where they can be accessed by ...
0
votes
0
answers
1k
views
Flux HelmRelease valuesFrom behaviour
How is the Flux valuesFrom applied on the chart? It seems that valuesFrom will not override existing values in the Helm chart values.yaml. See example below. When I check the release then it shows the ...
0
votes
1
answer
945
views
How to Access Expo Dashboard Secrets in EAS Update for Sentry Integration in React Native?
I have a React Native application created with Expo and use Expo EAS Build for my preview and production builds.
I have three environment variables:
EXPO_PUBLIC_API_URL: This changes based on whether ...
- 2,384
0
votes
2
answers
310
views
How to setup secret/password values in Secrets Manager using CDK/Cloudformation?
We are looking to configure our SecretsManager instances via Cloudformation/CDK.
Based on what we've read, SecretsManager recommends using their generate secrets function.
Unfortunately, we can't use ...
- 7,948
0
votes
0
answers
676
views
docker postgres: how to use password from a secrets.yml file
I am trying to put all of an app's secrets into a single file. Previously, each secret had its own file, like this:
.secrets/
├── .allowedhosts
├── .key
└── .passwd
Accordingly, the docker-compose....
- 2,961
