Generated from
corpus/standards/secrets.yml. Do not edit by hand — runpython scripts/generate-corpus-docs.py.
corpus/standards/secrets.yml¶
Title / id: Secrets via Bitwarden / secret-gate
yaml
id: std.secrets
status: active
title: Secrets via Bitwarden / secret-gate
rules:
- Never commit secrets to git.
- Unlock with secret-gate; fetch via bws by key name.
- Prefer reusable secret key names across repos.
- Repo CI secrets set per-repo on Free-plan orgs (VPS_HOST, VPS_SSH_KEY, TAILSCALE_AUTHKEY when self-hosting).
unit_ref: lines/software/units/sw.std.secrets.md