Using a W Secret Manager Is the Next Step

Don't keep your secrets in get y. At absolute minimum, keep them in the configuration section of getga. Get hob or get lab publisher fed into your c i pipe blindes as as variables. That's not perfectly secure, but it's a hack up a lot better than keeping it in your get repository. A proper secret manager is is the next step. But in any case, if your application can read that as an environment variable, your you're on the right track, yes.