▲ | nextaccountic 3 days ago | |
Are you talking about this?
It's rather weird that they would add keys to the source code like this, rather than reading from the environment or some secrets service. Rather than redacting the source, they should refactor to remove the keys from the source | ||
▲ | barbazoo 3 days ago | parent | next [-] | |
One example, that's right. Another one:
and right at the top:
| ||
▲ | mvdtnz 3 days ago | parent | prev | next [-] | |
There's no way you got to this bit without skipping over multiple actual redactions, like SQL queries with all of the details replaced with ellipsis. Why are you cherry-picking one innocent instance when you know exactly what the parent comment is talking about? | ||
▲ | bathtub365 3 days ago | parent | prev [-] | |
Since it’s redacted we don’t know what was here. They could be redacting the names of the environment variables or other secrets names they use for credentials since a supply chain attack could more easily exfiltrate them if they know the name. |