> Use environment variables to point to where secrets are located, not to store their values.

Now your apps need to be able to read the secret that is pointed to, as opposed to the task runner populating the secret and the app would not know about the details.Not to mention the changes it entails to development.

▲

esseph a day ago | parent [-]

> Not to mention the changes it entails to development.

Oh no, guess they'll have to hire developers that can adapt!

▲

skinfaxi 13 hours ago | parent [-]

I'm not sure the point of your comment.

	▲	esseph 10 hours ago \| parent [-]
		Developers often do things out of convenience, not thinking about repeatability, deployment reliability, security, or thinking about other people having to manage and patch systems for 30y after their gone. Docker in 2026 is a perfect example of this (long lasting habits due to familiarity, not best practice). In addition to the developers not interested in using AI to augment their skills and code.