Is it a bad idea to commit an encrypted secret stored in my config file to my github repo?
e
echoing-dinner-19531
04/25/2025, 3:42 PM
We generally consider this safe, they're AES256 encrypted so if you trust that you should be ok with these being in public view. Some users have very low risk tolerances though and avoid this.
m
microscopic-arm-69377
04/25/2025, 4:10 PM
Thank you! It's a private repo as well, but I really wanted to double-check.
m
many-telephone-49025
04/27/2025, 9:31 AM
Hey @microscopic-arm-69377,
also have a look into https://www.pulumi.com/docs/esc/ if you want to avoid this at all with our secret and config solution. Works also well with Pulumi IaC.