A developer commits a DNA Center token in a .env file, then deletes the line in a later commit. Which secret-storage approach is the relevant fix going forward?
Select an answer to reveal the explanation.
Short Explanation
Git remembers like a library microfilm—deleting a line today does not erase yesterday’s reel. Put tokens in a secret store or a gitignored local file, not the repo.
Full Explanation
A credential committed to git remains recoverable from history after the line is removed. The relevant approach is a dedicated secret store or an uncommitted, gitignored local file—not the repository. This focuses on the store, while 12-factor config explains why deploy secrets stay out of source.