2

For sensitive data such as aws keys or password, I put them to files which is in .gitignore to make sure it is not committed to git. However, when keys are going to be used when scripts are running, what should I do? Manually add key content in a file before running? What if the program need to be triggered periodically by Jenkins?

Can anyone help me with this?

JonathanDavidArndt
  • 2,518
  • 13
  • 37
  • 49
suanziliu
  • 137
  • 10

1 Answers1

2

Manually add key content in a file before running?

That is the general idea: sensitive information should not be in a Git repo, but in an external referential, like a Vault.

Once you have a script able to extract that information from a vault, you could call that script automatically on checkout through a git content filter driver.

VonC
  • 1,262,500
  • 529
  • 4,410
  • 5,250