#attestation

Stop Putting Secrets in process.env: Encrypt Env Vars with AWS KMS

After a CVSS 10.0 RCE (CVE-2025-66478), we stopped trusting process.env. Here’s what I built instead