[rblatz]

The devs shouldn’t have access to prod credentials in the first place. That’s the real issue.

[chasil]

Internal audit said the same thing.

Quelle surprise!

[sampullman]

Commiting credentials is also a real issue, best to avoid doing both.

[zelphirkalt]

Then you need to hire someone else to manage the deployment of services though.