Trigger.dev customer environment variables exposed

Re:Trigger.dev customer environment variables exposed by fathermarz on Sunday November 01, 2026 @11:50PM (#50333257)

Holy smokes, is security just not a priority at all anymore? Like in what world do we live in, that this is acceptable. And at the volume this has been happening, bad guys are having a FIELD DAY.

[ Parent | on HN ]

Re:Trigger.dev customer environment variables exposed by OccamsMirror on Monday November 02, 2026 @12:18AM (#50333388)

What makes you think security was ever a priority?

[ Parent | on HN ]

Re:Trigger.dev customer environment variables exposed by dgellow on Monday November 02, 2026 @05:19AM (#50335023)

Security has never been a priority in the software world

[ Parent | on HN ]

Re:Trigger.dev customer environment variables exposed by fathermarz on Monday November 02, 2026 @11:30AM (#50339301)

I think maybe my lens is slightly skewed because I have only worked in security software? This is shocking to me.

[ Parent | on HN ]

Re:Trigger.dev customer environment variables exposed by _pdp_ on Monday November 02, 2026 @07:07AM (#50335738)

In my experience, small teams put security off because someone on the dev team has some security experience, or thinks they do. But it is never the priority, there is always something more urgent to ship, and nobody has real skin in the game because it is not their job. Then shit happens. They rush to hire a security team, and that team spends the next few years fighting the culture.

[ Parent | on HN ]

Re:Trigger.dev customer environment variables exposed by fathermarz on Monday November 02, 2026 @11:31AM (#50339330)

It makes sense, I have a skewed perspective because I have only been in security software.

Thanks for that anecdote

[ Parent | on HN ]