Shell
You're viewing a free preview. Sign in free to read every script.
Why this exists Shell scripts often run as root, from cron, with credentials, and are edited by many people. That makes them a favourite way for a small mistake to become an incident: a token visible in the process…
Writing Safe Scripts: Secrets, Input Validation, Temp Files, PATH and Downloads
The security habits for scripts that run with real privileges: keeping secrets out of arguments and logs, validating input, never using eval, creating temp files safely, hardening PATH, watching umask and xtrace, and verifying a downloaded file before running it.
Sign in free to read this script, along with the rest of the library.
Sign in free