Security

Security 文档从 credential、日志和部署变更的实用处理规则开始。

Secret handling

environment variable or secret manager -> application runtime -> redacted logs

生产 credential 只应存在于批准的部署本地配置或 secret manager 中。