Learn the importance of securely handling secrets in CI/CD pipelines and explore different methods for managing them. The post covers why storing secrets as plain text is risky and offers two primary solutions: using the CI/CD system's secrets feature and leveraging secret managers with short-lived tokens via OpenID Connect (OIDC). Detailed instructions are given for integrating these practices with GitHub Actions, GitLab CI, and AWS services.

10m read timeFrom blog.gitguardian.com
Post cover image
Table of contents
1. DO NOT: Store Secrets as Plain Text2. Store Secrets in CI/CD Systems3. Use a Secret Manager with CI/CD Workflows4. Summary

Sort: