Heroku CI and Review App Secrets Compromised

Re:Heroku CI and Review App Secrets Compromised by oxff on Tuesday May 17, 2022 @11:02PM (#31418825)

Has anyone done a security review of Heroku alternatives? I see lots of comments about moving there and using them instead of Heroku because of this incident. But that's hardly a justifiable reason alone, since those new platforms are probably worse off in security.

[ Parent | on HN ]

Re:Heroku CI and Review App Secrets Compromised by beninsydney on Tuesday May 17, 2022 @11:19PM (#31418895)

Fly have https://news.ycombinator.com/user?id=tptacek working for them so it's hard to imagine they would get security wrong.

[ Parent | on HN ]

Re:Heroku CI and Review App Secrets Compromised by ryanSrich on Wednesday May 18, 2022 @06:52AM (#31421203)

Is render SOC 2 certified? ISO 27001? Those are fairly standard. If they don’t have either it’s going to be a hard time getting any serious business to migrate.

[ Parent | on HN ]

Re:Heroku CI and Review App Secrets Compromised by anurag on Wednesday May 18, 2022 @02:33PM (#31426114)

Render will have these certifications late summer (we're currently being audited for both).

[ Parent | on HN ]

Re:Heroku CI and Review App Secrets Compromised by njp77 on Monday May 23, 2022 @10:27AM (#31479461)

Aptible has always prioritized security, and is a competitive alternative. https://www.aptible.com/heroku-alternative/

[ Parent | on HN ]