Tag: #secrets
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 2 posts
Secrets Management — Why a .env File Is Not Enough, the Paths Environment Variables Leak Through, and How to Design Rotation
Adding .env to .gitignore does not make a secret safe. The process environment is readable verbatim from the same host through /proc/PID/environ, it rides out in crash reports, debug pages and CI logs, and it stays forev
2026-07-26 · 16 min read #security#secrets#devops#vault#kubernetesWhere Developer Tokens Leak — The VSCode 1-Click Token Theft and Secret Hygiene
Dissecting the June 2026 case of one-click GitHub token theft through a VSCode bug, this post traces the paths along which tokens leak in developer environments. It covers PAT permission design, token rotation, secret sc
2026-06-12 · 15 min read #security#github#tokens#devops#secrets