[theozero]

Better than masking them in a file, get them out of the file entirely! Pull them declaratively instead - https://varlock.dev

This tool also redacts from your logs if working in js.

[verdverm]

This appears to be the only comment you make on HN

https://news.ycombinator.com/threads?id=theozero

Using HN less like a marketing platform would be appreciated

[NewJazz]

What does this offer that a scriptlet that sets the envvars doesn't?