Is it a bad idea to commit an encrypted secret stored in my config file to my github repo?
e
echoing-dinner-19531
04/25/2025, 3:42 PM
We generally consider this safe, they're AES256 encrypted so if you trust that you should be ok with these being in public view. Some users have very low risk tolerances though and avoid this.
m
microscopic-arm-69377
04/25/2025, 4:10 PM
Thank you! It's a private repo as well, but I really wanted to double-check.
m
many-telephone-49025
04/27/2025, 9:31 AM
Hey @microscopic-arm-69377,
also have a look into https://www.pulumi.com/docs/esc/ if you want to avoid this at all with our secret and config solution. Works also well with Pulumi IaC.
No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.