Tradecraft
Secrets Management Part 3 – Storing and Retrieving Secrets from macOS Keychain
A lighter, lower-friction alternative to gopass for Mac users: storing secrets in Keychain and loading them with direnv
AppSec
Tradecraft
Secrets Management Part 2 – Encrypted Secret Retrieval with Gopass
In this post I explain how to use gopass to GPG encrypt and store your secrets locally, then integrate with direnv to decrypt and load your secrets to environment variables in your shell without exposing them in plaintext. In Part 1 of this Secrets Management series I showed you: * How
Tradecraft
Secrets Management - Managing Environment Variables with Direnv
Many of my tools, such as GitLab Watchman, are designed to find secrets hardcoded or added as files to code repositories. Handling secrets this way is a bad idea for a number of reasons, but the main issue is that it leaves them open to being exposed. In this post,