Pre-Commit Hooks That Catch Secrets
A secret that reaches git push is already gone. Compare gitleaks, TruffleHog, and detect-secrets as pre-commit hooks, with working configs you can copy.
Tag: secrets-management
All the articles with the tag "secrets-management".
External Secrets Operator + Vault on k3s
Pull secrets out of git with External Secrets Operator and Vault on k3s: real server mode, Kubernetes auth that actually works, rotation and audit trails.
SOPS + age: Secrets in Git
Stop the .env-in-1Password dance. SOPS encrypts secrets per-key, age provides modern crypto, and git stores them safely. Here's how to ship it without the traps.
Vault vs Infisical: Secrets Management for Teams Who've Learned the Hard Way
·
Updated:
HashiCorp Vault vs Infisical compared: secrets management for DevOps teams, Docker Compose setup, SDK examples, and when the added complexity is worth it.
HashiCorp Vault: Stop Hardcoding Secrets Like It's 2012
·
Updated:
HashiCorp Vault tutorial: KV v2 secrets, AppRole auth, dynamic database credentials that auto-expire, a PKI certificate authority, and auto-unseal with cloud KMS.