Where would you suggest putting the sensitive credentials?
Not in .env files next to your code that is exposed to supply chain risks.