T1-R5 in five minutes

Open app View repo

A key in a source file will be copied.

Pass secrets by the environment of the machine that runs the call.

This lab's Python files do not need a key.

Logs should not print the key.

If a key leaks, rotate it at the provider. Confirm that provider's current steps.

The failure mode is not only theft. A key in a screenshot becomes part of a slide. Crop it or do not capture it.

Sources and go deeper

sources.json