Designing Security Policies for dotsecenv
A long weekend, a SUID dead end, and the simpler design that shipped.
Read →2 articles
A long weekend, a SUID dead end, and the simpler design that shipped.
Read →Why plaintext .env files are a prime target for supply-chain attacks, and how dotsecenv keeps developer secrets encrypted at rest with GPG.
Read →