Another option is to use command line arguments like node app.js --option argument which prevents any keys to ever be committed or written to a file since they are only made available at run-time.
It also plays nice with docker since one can just write any secrets into a docker .env file that feeds ENV variables either to a container or an image.
For further actions, you may consider blocking this person and/or reporting abuse
We're a place where coders share, stay up-to-date and grow their careers.
Another option is to use command line arguments like
node app.js --option argument
which prevents any keys to ever be committed or written to a file since they are only made available at run-time.It also plays nice with docker since one can just write any secrets into a docker
.env
file that feedsENV
variables either to a container or an image.