Stop Committing Your Secrets (You Know Who You Are)
2mon 14d ago by programming.dev/u/codeinabox in security@programming.dev from jfmaes.me
Plaintext .env files are a stupid little footgun. Here's the SOPS + age + direnv setup I use to keep secrets encrypted, auto-loaded, and out of Git.