Hello all. I’m wondering about the approach of storing the access token as a secret; e.g. from the Civo provider docs:

pulumi config set civo:token XXXXXXXXXXXXXX --secret

I see an encrypted value of the token is written out into a yaml file in the project. My question is, is this safe to commit into SCM or should it be ignored; i.e. excluded via .gitignore? Thanks in advance!

yes, it's safe to commit. It's encrypted by a unique key. You can also choose a cloud provider key like AWS KMS if you desire more control

Thx for the fast response!