How should I store sensitive or proprietary code?

1. Private bucket (the default) and never set files to public.
2. Preview off ("preview": false) so code is kept only in encrypted zips.
3. Minimal keys: a CI uploader gets buckets:write; a reader gets buckets:read; nothing gets more than it needs.
4. Server-side keys only, never in front-end code.
5. Watch the events feed for unexpected actions.
6. Optional: encrypt files yourself before uploading.
7. No secrets in zips: strip .env files and credentials before zipping.

Learn more#

• Encryption
• Authentication