After dealing with the fallout of way too many people having their API keys leaked by leaving them in their code directories, I've just moved to never letting my API tokens live on disk in the first place. Just pull them in at runtime from the password manager. It's more steps, but at least it means it doesn't accidentally get checked into GitHub...
0 Boosts
0 Likes
@majorlinux for 1password:
https://www.1password.dev/get-started/secure-developer-secrets
For bitwarden, I had to do a little scripting, but it's got a cli https://bitwarden.com/help/cli/
@JessTheUnstill I might give BitWarden a try again.
@JessTheUnstill You got a doc for that?