logoalt Hacker News

toomuchtodoyesterday at 10:53 PM1 replyview on HN

Great write up. Reminder that if you commit these to a Github Gist and the provider partners with GitHub for secrets scanning, they’ll rapidly be invalidated.


Replies

pwdisswordfishyyesterday at 11:11 PM

That's just a tautology.

"If the secrets issuer partners with X-corp for secret scanning so that secrets get invalidated when you X them, then when you X them the secrets will be invalidated".

The above is a true statement for all X.

show 3 replies