There are different aspects which must be considered in source code for a better code quality and security. Some of them from the past time that we didn’t upload our source code in GitHub or other code repositories like:
- Data injection
- Database connection string
Some other aspects belong to nowadays that we upload code to repositories and using cloud:
- Database connection string
- Client Credentials such as Client Secrets
- Access Keys to external APIs
- Certificates
- Encryption Keys
And of course there’s solution for each of the issues.
In the following link I’ll explain how we can solve the above issues via Azure Key Vault.