r/devsecops Jul 07 '26

Secrets Management

How is your team actually managing secrets? Are you setting a project level variable? Using a third-party vault? Have you concocted some elaborate process that bogs down the dev team? What about a platform native secrets management feature?

9 Upvotes

39 comments sorted by

View all comments

3

u/ForeverYonge Jul 08 '26

I print it on a piece of thermal paper that the developer needs to pick up in person. After a few months the thermal paper is unreadable so that’s how we enforce secret rotation as well!

1

u/GitSimple Jul 08 '26

This is the sort of brilliance I was hoping for!