Concept · Cloud, hosting and security

Secrets

Also called: secret, environment variable, environment variables, env vars, env var, env file, leaked key, secret management

Passwords, API keys and other credentials that software needs to run. They are kept out of the code, usually in settings called environment variables, because a secret saved in a repository stays findable in its history.

For example: A developer saves a database password in the code and pushes it to a public repository. The team has to change the password, because deleting the line does not remove it from the history.

Connects to 8

Page last changed · Suggest a correction