フリー問題

問題文

A pipeline needs a database password at deploy time, and the definition file is stored in a repository that many people can read. Where should the value live?

選択肢

1. Store the value in a vendor build script and let the job read it through an injected environment variable at run time.
2. Store the value in a managed secret store and let the job read it through an included plain text file at run time.
3. Store the value in a vendor build script and let the job read it through an included plain text file at run time.
4. Store the value in a managed secret store and let the job read it through an injected environment variable at run time.