{"id":"secretmanager-avoid-env-vars-and-files","text":"Best practice is to avoid passing secrets via environment variables or filesystem and instead use the Secret Manager API directly via client libraries.","truth_value":"IN","source":"entries/2026/03/11/secretmanager-best-practices.md","source_url":"","source_hash":"08524a165dc98d34","justifications":[],"dependents":[],"metadata":{},"explanation":{"steps":[{"node":"secretmanager-avoid-env-vars-and-files","truth_value":"IN","reason":"premise"}]}}