Do Not Use Environment Variables with Secrets
An XCCDF Rule
Description
Secrets should be mounted as data volumes instead of environment variables.
Rationale
Environment variables are subject and very susceptible to malicious hijacking methods by an adversary, as such, environment variables should never be used for secrets.
- ID
- xccdf_org.ssgproject.content_rule_secrets_no_environment_variables
- Severity
- Medium
- References
- Updated