Isn't aero's solution to just not really handle secret but leave it up to the user?

Yeah, but aero gives some sugar for including secrets from ~/

Does it? env HOME is nothing special as far as I can see (that's good, actually)

more just that it has #include and #join and you can reference those things brought in easily which makes it worth checking in as a development thing (which is my usecase here)

pro tip: don't allow your secrets to be printed

ex at work we have an aero tag #secret, we include secrets via env vars usually, and that tag wraps them in a custom type that will not output the actual value if printed

so it looks like {:foo #secret #env API_KEY}

and on the consumer side, you only deref/unmask the secret value at the last possible moment

that's a decent way to avoid accidental output of private stuff in logs & elsewhere (sentry, telemetry & whatnot)

actually it's oss (undocumented tho): https://github.com/exoscale/cloak/blob/master/src/exoscale/cloak.cljc

the tag is just : (defmethod aero/reader 'secret [ value] (exoscale.cloak/mask value))

Thank you! My colleague needed something like that

We went a different route and redact secret values in our logging code. Haven't thought deeply about trade-offs there.

I'm a big fan of mind maps and have been for years. Shame that Whimsical didn't support mobile so I can't look at it right now:worried:

Oh, interesting. I can open that link on mobile Safari, at least.

That's great, thx for sharing! reading it on my android phone right now

@U4ZDX466T Maybe it just doesn't like Bing/Edge on Android? I can read it in Edge (Chromium) desktop and it's great to see the process all laid out like that -- nice work! I've bookmarked it for the future.

Thanks! Happy to hear about (and fix) any mistakes or omissions you might spot.

I found it really helpful. Thanks for sharing! 💯

Glad to hear it!

why do you think clojure.walk is not available in bb?

I couldn't see it in the list of available namespaces and libraries

it is available

hm

well, great!

I was searching here: https://book.babashka.org/#libraries

docs are always out of date or incomplete, clojure.walk has been in bb from the very beginning

Your second sentence certainly validates the first!

PR welcome ;)

I'm trying, but getting

remote: Permission to babashka/book.git denied to Reefersleep.
fatal: unable to access '': The requested URL returned error: 403

borkdude@MBP2019 /tmp $ git clone 
Cloning into 'book'...
remote: Enumerating objects: 1790, done.
remote: Counting objects: 100% (411/411), done.
remote: Compressing objects: 100% (166/166), done.
remote: Total 1790 (delta 275), reused 374 (delta 245), pack-reused 1379
Receiving objects: 100% (1790/1790), 748.37 KiB | 3.65 MiB/s, done.
Resolving deltas: 100% (1118/1118), done.

🤷

filing an issue is also fine

I cloned it fine, the above message is from trying to push my branch

sorry

bit unclear 🙂

did you clone a fork of yours?

cloned directly from yours, pushing a branch directly to yours

maybe not "how it's done" tm

why do you think you, a random person on the internet, can push a branch to my repo? ;)

😛

I'll return to this later

no problem, take your time, much appreciated

the workflow is usually: make a fork on github, clone that fork using ssh:// (not https://), push your branch and then make a PR

Why ssh over https?

I've done this before with other repos a few times, but I didn't see it in the CONTRIBUTING.md, so I thought I could get away with pushing a branch directly onto your repo.

I guess it's implied by just being on github and that being the convention there? Or maybe it's even just a git convention for open source projects?

Thank you :)

Thank you!

you can never just push something to a repo that you don't own or have the right security access to

Well, I thought having branch pushing abilities open to the public was a thing. But I've never really looked into admin stuff on github.

Thanks for elaborating, I'll keep it in mind for my next PR 🙂

nope, that is not a thing

Consider me schooled 🙂

when you are working on a repo of your company, if you can do this, this is because you have access, but this is not the case for repos generally. e.g. I can't push a branch to http://github.com/clojure/clojure, that would be very surprising to me if I could :)

Jawohl!

Maybe I'd know this by heart if I were a more diligent open source contributor :face_with_monocle:

no big deal, thanks for fixing the docs

Thanks for everything you do (that I know of 😄 )