[cpursley]

Why are important push secrets in a dev env config? Btw humans devs make this same mistake all the time.

[digitaltrees]

umm lots of providers have cli tools: ‘heroku run rails db:drop —-app {name}’ railway, fly.io etc. so unless you don’t ever use their cli tools locally there’s a vector. Plus CI/CD might also have credentials to do things like run migrations.

[cpursley]

Well that’s a developer problem, then. We use fly but prod secrets are not saved locally.

[digitaltrees]

So you can’t ssh into the pg or database?