The vault of the cloud provider would just inject the value of the environment variable securely so it doesn't have to be stored on-disk. What the parent poster wrote isn't wrong.

The parent poster is wrongly quoting me to say the original post doesn't mean “env var”. Yes, it does mean env var.

No, they are not stored permanently on disk according to 12f. They are only injected for the lifetime of the application and destroyed when stopped.

It's not okay to store your secret on your own machine disk's .bashrc forever.

It seems we're in agreement anyway.

> "The environment" is not "environment variables" and not ".env files"

Is there confusion because an extra “not” leaked in?