Taryn East taryneast

## README.md

      
        
          
            
              
              1 file
            
          
          
            
              
              5 forks
            
          
          
            
              
              0 comments
            
          
          
            
              
              11 stars
            
          
        
        
          
              
          
          
            
                cjolly
                / README.md
            
            
              Last active
              August 4, 2023 08:21
            
              
                How to securely set rails secret key when you deploy to Heroku.
              
          
        
      
        
  
      
    Stop Versioning Rails Secret Tokens

After reading Code Climate's Rails' Insecure Defaults I realized I was guilty of breaking rule 3. Versioned Secret Tokens. Here's how I fixed it.
Use dotenv in development and test environments:
# Gemfile
gem 'dotenv-rails', groups: [:development, :test]