This doesn’t really fix that it can echo the secrets and read the logs. `enveil run — printenv`
Not the author but No, the decryption would ask the secret again? The readme mentions it's wiped from memory after use.
alt Hacker News
Not the author but No, the decryption would ask the secret again? The readme mentions it's wiped from memory after use.