Poisoned Pipeline / Mitigations / M1890

M1890

Encrypt secrets

Sensitive information stored in configuration files should be encrypted to protect it from unauthorized access.

Applies to

• T0189 Secrets in configuration files
• T0103 Scan public artifacts for secrets

References

• https://werf.io/documentation/v1.2/reference/cli/werf_helm_secret_encrypt.html