I'm curious about the different approaches to secrets management. What techniques do you use to keep secrets secure, like utilizing ephemeral tokens for your workers? Any insights or tools you recommend?
1 Answer
I've been using HashiCorp Vault for most of our secrets management. It really shines for centralized team solutions, especially when it comes to handling GitHub Runners and other integrations. It might seem complex at first, but it’s super helpful once you set it up right. Just keep in mind that it can be a little pricey!
Totally agree! Vault by HashiCorp does a great job, especially for managing dynamic secrets.