# Better security for your app's secrets

DevFeed: [Better security for your app's secrets](<https://devfeed.tech/articles/better-security-for-your-app-s-secrets-11607.md>)

Original publisher: [Read original article](<https://incident.io/blog/application-secrets>)

Author: Lawrence Jones

Published: 2023-07-10T12:39:55Z

Content type: article

Language: en

Sources: [The incident.io Blog](<https://devfeed.tech/sources/the-incident-io-blog.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [configuration](<https://devfeed.tech/topics/configuration.md>), [Google](<https://devfeed.tech/topics/google.md>), [Command-line interface](<https://devfeed.tech/topics/cli.md>), [Heroku](<https://devfeed.tech/topics/heroku.md>), [Cloud Run](<https://devfeed.tech/topics/cloud-run.md>), [migration](<https://devfeed.tech/topics/migration.md>), [Code](<https://devfeed.tech/topics/code.md>)

Tags: [cli](<https://devfeed.tech/tags/cli.md>), [config](<https://devfeed.tech/tags/config.md>), [core](<https://devfeed.tech/tags/core.md>), [gcp](<https://devfeed.tech/tags/gcp.md>), [google-cloud](<https://devfeed.tech/tags/google-cloud.md>), [incident](<https://devfeed.tech/tags/incident.md>), [incident-channel](<https://devfeed.tech/tags/incident-channel.md>), [incident-management](<https://devfeed.tech/tags/incident-management.md>), [incident-response](<https://devfeed.tech/tags/incident-response.md>), [migration](<https://devfeed.tech/tags/migration.md>), [outage](<https://devfeed.tech/tags/outage.md>), [post-mortem](<https://devfeed.tech/tags/post-mortem.md>), [secrets](<https://devfeed.tech/tags/secrets.md>), [security](<https://devfeed.tech/tags/security.md>), [server](<https://devfeed.tech/tags/server.md>), [slack-incident](<https://devfeed.tech/tags/slack-incident.md>)

## AI overview

This article explains how the incident-io/core application manages configuration and secrets across environments. It distinguishes code-tracked configuration, sensitive configuration, and infrastructure-specific runtime values, then describes using Google Secret Manager and a CLI wrapper to protect and operate application secrets.

## Source excerpt

What comes after your default, out-of-box application secret solution? How do you add security to Heroku's environment variables, or go beyond putting secrets directly into Kubernetes? We've used GCP Secret Manager to improve our app secret handling, and this post shows how you can do the same.