985: Stop putting secrets in .env

Scott and Wes are joined by Phil Miller and Theo Ephraim to talk about Varlock, a new approach to environment variables that adds schemas, validation, and security to the humble .env file. They dig into the risks of traditional env workflows, how schema-driven configs improve DX, and how tools like Varlock help manage secrets safely across frameworks, CI, and AI-powered workflows.

Show Notes

• Welcome to Syntax!
• The Risks of .env Files
• Introducing Varlock: A Unified Solution
• Schema-Driven Environment Variables
• Integrating with Various Frameworks
• Brought to you by Sentry.io
• Cross-Language Compatibility
• Best Practices for Environment Variables
• Security Features of Varlock
• AI Integration and Environment Variables
• Introduction to Varlock and GitHub Actions
• Secrets Management and Best Practices
• The Future of Varlock and Open Source
• Sick Picks + Shameless Plugs

Sick Picks

• Phil: Bela.io
• Theo: Wonder Man

Shameless Plugs

• Phil: nauticalartifacts
• Theo: howtostore.food

Hit us up on Socials!

Syntax: X Instagram Tiktok LinkedIn Threads

Wes: X Instagram Tiktok LinkedIn Threads

Scott: X Instagram Tiktok LinkedIn Threads

Randy: X Instagram YouTube Threads