Ansible check dat dev-secrets niet in productie terechtkomen

Uit de audit:

the testing team observed that secrets in the production environment were stored securely using Ansible Vault. However, [the team] was unable to determine whether sufficient measures had been established to ensure that development secrets were replaced when building the application. In this regard, one can recommend ensuring that automated procedures are implemented to prevent any developer from launching code using the placeholder secrets; code comments should not be considered the most effective method by which to achieve this.

SURFscz / SRAM-deploy

Ansible check dat dev-secrets niet in productie terechtkomen #329