Credential exposure

This category organizes the jackin❯ research on credential exposure. Choose a page by the question you need to answer.

Browse

Container Credential Exposure — Beyond Env Injection

Maps credential exposure paths beyond environment injection and compares controls at container and host boundaries.

Credential Source Pattern — Design

Defines a credential-source abstraction for resolving secrets without embedding provider-specific behavior in consumers.

Host Bridge Design — Flows, Threat Model, and Open Questions

Defines host-bridge request flows, trust boundaries, authorization controls, and unresolved security questions.

jackin-exec: Design Rationale and Implementation Record

Records the threat model and architecture for releasing credentials only to an authorized on-demand command.

Registry Configurations — Design

Designs secure registry configuration delivery across host, capsule, runtime, and credential-source boundaries.

How to read

Start with the page closest to your current question. Follow its related-work links for evidence in adjacent categories and its Roadmap links for implementation commitments.