Update writing.md

add warning about hard coded RSA Private Keys.

Signed-off-by: Alex <52247724+Elya29@users.noreply.github.com>
This commit is contained in:
Alex
2024-01-25 10:32:34 +01:00
committed by GitHub
parent 30e76f392e
commit 90c5f9db54
+3 -1
View File
@@ -220,6 +220,8 @@ clientSecret: someGithubAppClientSecret
webhookSecret: someWebhookSecret
privateKey: |
-----BEGIN RSA PRIVATE KEY-----
SomeRsaPrivateKey
SomeRsaPrivateKeyForExampleOnly
-----END RSA PRIVATE KEY-----
```
**Warning: RSA private keys should not be hard coded**. Keep them in a secure storage solution like Vault, to ensure they are neither exposed nor misused.