Using `replace-literal` to insert secrets leaks the secrets through the `replace-literal` process' `/proc/<pid>/cmdline` file. `replace-secret` solves this by reading the secret straight from the file instead, which also simplifies the code a bit.wip/little-gl
parent
38398fade1
commit
7842e89bfc
Loading…
Reference in new issue