nelson
nelson copied to clipboard
Implement type-safe secrets protection
Most secrets used throughout the codebase are carried along as strings. I think an implementation like that in ciris would go a long way in helping to manage the risk around logging users' secrets. Hashicorp Vault was actually just hit with a similar CVE.
Huh, this is super fascinating @goedelsoup - would love to see something like this, as it certainly is an issue. Thanks for submitting this