Is it a bad idea to commit an encrypted secret sto...
# general
m
Is it a bad idea to commit an encrypted secret stored in my config file to my github repo?
e
We generally consider this safe, they're AES256 encrypted so if you trust that you should be ok with these being in public view. Some users have very low risk tolerances though and avoid this.
m
Thank you! It's a private repo as well, but I really wanted to double-check.
m
Hey @microscopic-arm-69377, also have a look into https://www.pulumi.com/docs/esc/ if you want to avoid this at all with our secret and config solution. Works also well with Pulumi IaC.
m
@many-telephone-49025 Thank you! I'll review these.