alt.hn

4/2/2025 at 6:43:00 PM

GitHub found 39M secret leaks in 2024. Here's what we're doing to help

https://github.blog/security/application-security/next-evolution-github-advanced-security/

by gnabgib

4/2/2025 at 9:03:43 PM

This is a point that I absolutely don't like with .Net projects. Not that it has to be this way as dot-env files can be used as well as environment variables in general. It's just the App.json/Web.config files and transforms are typical, including production environments. Even if it's a private repository with restricted access it feels wrong.

That said, I know they don't have to be this way, just a huge niggle IMO.

by tracker1