# Cloud Security Blasphemy: Secrets in git

- Link: https://www.agilicus.com/cloud-security-blasphemy-secrets-in-git/
- Published: 2019-06-05T12:51:30+00:00
- Author: Kyle Larose

Ever wondered why so many breaches happen due to secrets being checked in to source
control? The answer is partially that committing secrets to source control is convenient
and easy. What if we could commit secrets to git in a safe and secure way without
too much hassle?

Last week I presented on three topics at the [Waterloo Technology Chautauqua](https://www.meetup.com/Waterloo-Technology-Chautauqua/):
Google Cloud [KMS](https://cloud.google.com/kms/), [SOPS](https://github.com/mozilla/sops)
and [kustomize](https://github.com/kubernetes-sigs/kustomize). Using a [simple](https://github.com/klarose/secret-checker/)
application, I demonstrated how one can use these three technologies to easily provision
[Kubernetes](https://kubernetes.io/) secrets from encrypted secrets stored in git.
No more accidents!

GitOps + Security == Advanced Security, Cloud Native.

Sad you missed out? Well don’t worry. The presentation was recorded. Check it out
[here](https://www.youtube.com/watch?v=KHMhYJpYMIU&feature=youtu.be).