Skip to content

Secret handling

Which secrets Fajita stores, how they are encrypted and masked, and where they must never appear.

Core

Fajita stores the secrets a monitor or channel needs, and protects them.

  • Supported secrets (monitor auth headers, webhook signing secrets, chat webhook URLs) are encrypted at rest.
  • After saving, values are masked; you can replace but not read them.
  • Rotating a secret replaces the stored value for the next operation.
  • Removing a channel or monitor removes its secret.

Was this page helpful?