How can I hide database credentials from ASP.NET core appsettings.json file in a public github repository?

Question

I have a public repository that has a ASP.NET Core Web API Project. How can I hide the database credentials in appsettings.json file from the repository? Cannot add the file to gitignore because the project configured for CI/CD.

bk2204 · Accepted Answer · 2021-08-22 19:16:49Z

1

The customary way to pass in credentials securely is to pass them in through the environment. It may be that your framework already has a way to receive these credentials from the environment, but if it needs a configuration file, you can check in a template configuration file, create a script to take the values from the environment and write the real configuration file, and then ignore the location of the real configuration file.

Almost all CI/CD pipelines have a secret store where you can add secrets, such as database credentials, and export them via the environment. Larger environments will often use a tool like Vault to store them securely.

What you don't want to do is check them in unencrypted to the repository because they're too easy to expose.

answered Aug 22, 2021 at 19:16

bk2204

78.9k7 gold badges111 silver badges127 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

How can I hide database credentials from ASP.NET core appsettings.json file in a public github repository?

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related