News for hackers. Stuff that matters.

A comment on Git-secret – store private data in a Git repo. Parent comment

Re:Git-secret – store private data in a Git repo by paulddraper on Monday May 09, 2016 @08:39PM (#11664432)
Storing secrets in a repository is not bad.

Storing secrets in a repository with non-secrets is bad, because access is pre-repo, and it would hurt your ability to limit secret access to the smallest possible audience.

[ Parent | on HN ]
Re:Git-secret – store private data in a Git repo by jedberg on Tuesday May 10, 2016 @12:27AM (#11665143)
You are technically correct, the best kind of correct.

However, storing secrets in a git repo is still not as good as a purpose built store, because the access control on git is not fine grained enough.

[ Parent | on HN ]
Re:Git-secret – store private data in a Git repo by paulddraper on Tuesday May 10, 2016 @12:42AM (#11665190)
Yes, that could be appropriate.

Access is per-repo, so if you have enough secrets and disparate interested parties, the number of required repos could make a dedicated alternative far more manageable.

[ Parent | on HN ]