RE: https://hachyderm.io/@miketheman/115618016841703831
Use Trusted Publishing instead of long-lived PyPI tokens. For other things, here's how to use 1Password with direnv to set secrets in env vars.
https://hugovk.dev/blog/2025/secrets-in-env-vars/
#security #1Password #direnv #cli #PyPI
If you have a fediverse account, you can quote this note from your own instance. Search https://mastodon.social/users/hugovk/statuses/115621854158207716 on your instance and quote it. (Note that quoting is not supported in Mastodon.)
RE: https://mastodon.social/@hugovk/115621854158207716
I also use 1Password to set environment variables, but with explicit control over when they are set and unset. My prompt and window title change to let me know there are credentials in the environment.
https://github.com/nedbat/dotfiles/blob/main/dot_config/shellrc/opvars.sh
