Hacker News Reader

And still no tests in your codebase.

This is absolutely ridiculous when it has been brought up in every past Show HN that you've done.

I really really hope nobody is reckless enough to use a completely untested platform to manage secrets.

There are tests: https://github.com/Infisical/infisical/blob/main/backend/tes...

/s

... What did I just read? (But seriously, why would you ever have a file of what looks like at least some sort of tests but literally every line commented out?)

Because they theoretically worked at some point but now they do not.

You are obviously right but the question is still valid. They are using git and a deleted file is a one command away, so why keep the file but fully commented?

IMO this highlights further bad engineering culture.

I was wondering whether this project is safe to trust my secrets. Thanks for saving me time.

Besides, a challenge with secrets is hardware. Storing them on ordinary EC2 instances or else is insecure. That's why AWS Secrets, for example, use specialized hardware that are hardened for this use case.

> That's why AWS Secrets, for example, use specialized hardware that are hardened for this use case.

I'm curious what your source is for this claim. I presume when you say AWS Secrets that you're referring to AWS Secrets Manager?

Reply on news.ycombinator.com