[jacques_chester]

> Two things which I never understood about using environment variables are how do you version control the changes and how do you manage these variables when you have more than just a handful of them?

If you're using Cloud Foundry, you put them in your manifest.yml and check that into source control. When you do `cf push`, they'll be updated.

Disclaimer: I work for Pivotal, who donate the most engineering to CF.

[kawsper]

So how is that different, or better, than putting in the source?

[jacques_chester]

Different repos with different access credentials to create another layer of separation between secrets and source. Defence in depth.

[jordic]

You shouldn't put in your repo sensitiva data.