DDoug Niccum·Nov 5Drone env vars: the complete referenceBuilt-in DRONE_* variables, pipeline and step scoping, from_secret, debugging, and when a dedicated secrets manager beats Drone-native secrets.12 min read·notes.secretstash.cloud
FFerhat Yildiz·Oct 31Managing Secrets on EKS with External Secrets Operator and AWS Secrets ManagerApplications running on EKS often need access to secrets. This guide shows how External Secrets Operator automatically synchronizes secrets from AWS Secrets Manager into Kubernetes Secrets that containers can consume.25 min read·blog.turingts.com
CCruxtab Technologies Pvt. Ltd.·Oct 30Protecting API Credentials in Shopify App IntegrationsLearn how to protect API keys, service-account credentials, and webhook URLs in Shopify applications using server-side processing and secure configuration.3 min read·cruxtab-technologies.hashnode.dev
DDoug Niccum·Oct 13Angular where to store API keys: frontend vs backendAnything in your Angular bundle is public. Learn which API keys are safe in environment.ts and how to move secret keys behind a backend proxy.12 min read·blog.dniccumdesign.com3
RRahul R·Oct 9Stop Hardcoding API Keys: A Practical Guide to Fetching Secrets from HashiCorp VaultA backend application securely connecting to a Vault server, with database credentials and API keys represented as protected secrets.8 min read·rahul-dataeng.hashnode.dev
MMadhav Bhasin·Sep 11Managing State, Secrets, and Environments in TerraformS01E03 of Terraform for Application Engineers6 min read·blog.madhav.dev
MManu Shukla·Aug 24Vercel Connect reached v0 apps on 21 August 2026 with 2 connector types that still store a long-lived secretVercel Connect reached v0 apps on 21 August 2026 with 2 connector types that still store a long-lived secret Summary. Vercel's changelog of 21 August 2026 says apps built in v0 can reach "100+ third-p13 min read·ecorpit.hashnode.dev
RRelayRouter·Aug 15How to Rotate an OpenAI-Compatible API Key Without Dropping RequestsImplement a two-key rotation workflow for Python clients with validation, rolling cutover, redacted logs, and a safe revoke order.11 min read·vectronode.hashnode.dev
AAnakin Tech·Aug 12Secret Vault Integrations Fail at the Permission BoundaryA practical comparison of 1Password and Azure Key Vault for automated logins, focused on scoping, RBAC failures, secret shape, and rotation.8 min read·anakinwriters.hashnode.dev
RRelayRouter·Jul 22How to Protect LLM API Keys in Browser-Based AI AppsKeep LLM and media API keys out of frontend bundles by routing requests through a server-owned authentication and policy boundary.1 min read·vectronode.hashnode.dev
