Discover the Art of Managing Secrets as a Software Engineer.
summary
Shows that 13 million secrets were found on GitHub in 2023 and argues engineers should avoid knowing secrets by building a local drop‑in emulator for Azure Key Vault called lowkey emulator. Implements 12 secrets, 23 keys and 17 certificate endpoints, supports multiple API versions and JavaScript/Java/.NET/Python clients, offers import/export and a time travel endpoint, runs in Docker Compose with MySQL and a Spring Boot example, and the demos and CI tests run successfully.
AI-written summary · about
chapters (9)
- 0:00Managing software secrets
- 1:50Introduction
- 7:51Why secrets shouldn't be known
- 11:56Cloud native secrets management
- 15:55Daily workflow with secrets managers
- 23:44Local test double for Azure Key Vault
- 31:17Proof of concept: Spring Boot and Lowkey
- 41:16Key takeaways
- 45:12Q&A
related talks
47mManaging your Secrets in a Cloud Environment
10mCan you keep it a secret?
46mSecrets Management for the Modern Tech. Pro
43mSecure Development
45mWrongSecrets: We Have a Secret for Everyone!
29m100,000 Different Ways to Manage Secrets in GitOps
26mHow To Keep A Secret
48mHow Source Code is Revealing our Secrets