To plan or not to plan: the Terraform file that leaked every password we had

<p>Committing an API key to a repo is the nightmare every developer has had at least once. Most of us have a scanner, a hook and a <code>.gitignore</code> that are supposed to make it impossible. I never thought I would be writing this post. Then a Terraform plan file showed up in our git history.</p> <p>A Terraform plan file is a zip archive. It does not care what you name it. Our <code>.gitignor

Читать первоисточник →