Designing Security Policies for dotsecenv
A long weekend, a SUID dead end, and the simpler design that shipped.
Read →#security
4 articles
-
-
Why Your .env Secrets Shouldn't Be Plaintext on Disk
Why plaintext .env files are a prime target for supply-chain attacks, and how dotsecenv keeps developer secrets encrypted at rest with GPG.
Read → -
Secure Services With Let’s Encrypt SSL/TLS Certificates Using DNS-01 Challenges
Issuing and renewing Let’s Encrypt SSL/TLS certificates with the DNS-01 challenge in Go, for services that cannot expose HTTP, using Cloudflare DNS and certmagic.
Read → -
Google Cloud Keyless Authentication in GitHub Actions
Authenticate to Google Cloud from GitHub Actions without long-lived service account keys, using OIDC and Workload Identity Federation, in five steps.
Read →