Sign up to save your podcasts
Or
Share 985: Stop putting secrets in .env
Share to email
Share to Facebook
Share to X
Share to email
Share to Facebook
Share to X
Or
985: Stop putting secrets in .env
Scott and Wes are joined by Phil Miller and Theo Ephraim to talk about Varlock, a new approach to environment variables that adds schemas, validation, and security to the humble .env file. They dig into the risks of traditional env workflows, how schema-driven configs improve DX, and how tools like Varlock help manage secrets safely across frameworks, CI, and AI-powered workflows.
Show Notes
00:00 Welcome to Syntax!
03:15 The Risks of .env Files
04:58 Introducing Varlock: A Unified Solution
06:56 Schema-Driven Environment Variables
11:47 Integrating with Various Frameworks
14:08 Brought to you by Sentry.io
14:32 Cross-Language Compatibility
17:50 Best Practices for Environment Variables
21:11 Security Features of Varlock
25:02 AI Integration and Environment Variables
29:12 Introduction to Varlock and GitHub Actions
32:45 Secrets Management and Best Practices
36:09 The Future of Varlock and Open Source
38:36 Sick Picks + Shameless Plugs
Sick Picks
Shameless Plugs
Hit us up on Socials!
Syntax: X Instagram Tiktok LinkedIn Threads
Wes: X Instagram Tiktok LinkedIn Threads
Scott: X Instagram Tiktok LinkedIn Threads
Randy: X Instagram YouTube Threads
View all episodes
By Wes Bos & Scott Tolinski - Full Stack JavaScript Web Developers
4.9
977977 ratings
Scott and Wes are joined by Phil Miller and Theo Ephraim to talk about Varlock, a new approach to environment variables that adds schemas, validation, and security to the humble .env file. They dig into the risks of traditional env workflows, how schema-driven configs improve DX, and how tools like Varlock help manage secrets safely across frameworks, CI, and AI-powered workflows.
Show Notes
00:00 Welcome to Syntax!
03:15 The Risks of .env Files
04:58 Introducing Varlock: A Unified Solution
06:56 Schema-Driven Environment Variables
11:47 Integrating with Various Frameworks
14:08 Brought to you by Sentry.io
14:32 Cross-Language Compatibility
17:50 Best Practices for Environment Variables
21:11 Security Features of Varlock
25:02 AI Integration and Environment Variables
29:12 Introduction to Varlock and GitHub Actions
32:45 Secrets Management and Best Practices
36:09 The Future of Varlock and Open Source
38:36 Sick Picks + Shameless Plugs
Sick Picks
Shameless Plugs
Hit us up on Socials!
Syntax: X Instagram Tiktok LinkedIn Threads
Wes: X Instagram Tiktok LinkedIn Threads
Scott: X Instagram Tiktok LinkedIn Threads
Randy: X Instagram YouTube Threads
More shows like Syntax - Tasty Web Development Treats
View all
Software Engineering Radio - the podcast for professional software developers
273 Listeners
Hanselminutes with Scott Hanselman
382 Listeners
The Changelog: Software Development, Open Source
288 Listeners
Software Engineering Daily
628 Listeners
Talk Python To Me
583 Listeners
Soft Skills Engineering
287 Listeners
Thoughtworks Technology Podcast
44 Listeners
Python Bytes
214 Listeners
The freeCodeCamp Podcast
485 Listeners
CoRecursive: Coding Stories
190 Listeners
Practical AI
211 Listeners
The Stack Overflow Podcast
62 Listeners
The Real Python Podcast
140 Listeners
PodRocket
61 Listeners
Oxide and Friends
68 Listeners