# Latest

**URL:** https://community.infisical.com/latest.md

[Latest](https://community.infisical.com/latest.md) · [Categories](https://community.infisical.com/categories.md) · [Tags](https://community.infisical.com/tags.md)

---

## [Welcome to Infisical! 👋](https://community.infisical.com/t/welcome-to-infisical/5)

<div class="topic-metadata">

**Author:** [@system](https://community.infisical.com/u/system)\
**Replies:** 0\
**Last updated:** [July 27, 2026, 1:19pm UTC](https://community.infisical.com/t/welcome-to-infisical/5 "2026-07-27T13:19:24Z")

</div>

We are so glad you joined us. Infisical Join the Infisical Community to ask questions, share ideas, get help, and connect with developers using Infisical. Here are some things you can do to get started: …

---

## [Audit Logging: Indicate / Tag Audit Event when Private Key disclosure occurs](https://community.infisical.com/t/audit-logging-indicate-tag-audit-event-when-private-key-disclosure-occurs/88)

<div class="topic-metadata">

**Author:** [@sinnwise](https://community.infisical.com/u/sinnwise)\
**Replies:** 1\
**Last updated:** [October 16, 2026, 9:52pm UTC](https://community.infisical.com/t/audit-logging-indicate-tag-audit-event-when-private-key-disclosure-occurs/88 "2026-10-16T21:52:15Z")

</div>

Hey team, We’re noticing in the Audit Logs that the Audit Event for “Export Certificate” with and without a private key shows no differences in the audit logs. Can we maybe have a separate audit event to notify when pri…

---

## [Portainer app connection + secret sync (PR #7670)](https://community.infisical.com/t/portainer-app-connection-secret-sync-pr-7670/64)

<div class="topic-metadata">

**Author:** [@zenato](https://community.infisical.com/u/zenato)\
**Replies:** 4\
**Last updated:** [October 15, 2026, 10:20pm UTC](https://community.infisical.com/t/portainer-app-connection-secret-sync-pr-7670/64 "2026-10-15T22:20:54Z")

</div>

Hey, Ashwin pointed me here from Slack, so posting my PR here instead. It adds Portainer as an app connection and a secret sync destination. Secrets get written into a stack’s env vars. Someone asked for this back in …

---

## [Webhook DELETE endpoint returns encrypted columns (PR #8643)](https://community.infisical.com/t/webhook-delete-endpoint-returns-encrypted-columns-pr-8643/90)

<div class="topic-metadata">

**Author:** [@Arunkoo](https://community.infisical.com/u/Arunkoo)\
**Replies:** 0\
**Last updated:** [October 15, 2026, 2:40pm UTC](https://community.infisical.com/t/webhook-delete-endpoint-returns-encrypted-columns-pr-8643/90 "2026-10-15T14:40:02Z")

</div>

Hi team! I opened a small backend fix and would appreciate a review when you have time: DELETE /api/v1/webhooks/:webhookId was the only webhook route without a response schema, so it returned the raw DB row, including e…

---

## [Gating Automated Private Key Disclosure](https://community.infisical.com/t/gating-automated-private-key-disclosure/89)

<div class="topic-metadata">

**Author:** [@sinnwise](https://community.infisical.com/u/sinnwise)\
**Replies:** 0\
**Last updated:** [October 15, 2026, 8:01am UTC](https://community.infisical.com/t/gating-automated-private-key-disclosure/89 "2026-10-15T08:01:18Z")

</div>

Hey Team, related to Audit Logging: Indicate / Tag Audit Event when Private Key disclosure occurs can we ask that when someone clicks on “Export Certificate” that the private key isn’t immediately loaded into memory? We …

---

## [Show & Tell: Infisical Agent & ECS Config Generator (Open Source)](https://community.infisical.com/t/show-tell-infisical-agent-ecs-config-generator-open-source/87)

<div class="topic-metadata">

**Author:** [@William\_Eduard\_Chua](https://community.infisical.com/u/William_Eduard_Chua)\
**Replies:** 0\
**Last updated:** [October 14, 2026, 4:39pm UTC](https://community.infisical.com/t/show-tell-infisical-agent-ecs-config-generator-open-source/87 "2026-10-14T16:39:54Z")

</div>

Hey everyone! :waving\_hand: I built a lightweight web tool to make deploying the Infisical Agent on AWS ECS faster and less error-prone, and wanted to share it with the community: Live Tool: https://infisical-generat…

---

## [Slack Workflow Integration in Certificate Alerting](https://community.infisical.com/t/slack-workflow-integration-in-certificate-alerting/84)

<div class="topic-metadata">

**Author:** [@sinnwise](https://community.infisical.com/u/sinnwise)\
**Replies:** 1\
**Last updated:** [October 14, 2026, 4:14pm UTC](https://community.infisical.com/t/slack-workflow-integration-in-certificate-alerting/84 "2026-10-14T16:14:47Z")

</div>

Hey team, We’d like to send Certificate Manager notifications through Infisical’s existing Slack integration, rather than setting up incoming webhooks separately. Right now, adding a Slack destination to a certificate …

---

## [ACME EAB Secret incompatible with Traefik (lego) — "illegal base64 data at input byte 0" ](https://community.infisical.com/t/acme-eab-secret-incompatible-with-traefik-lego-illegal-base64-data-at-input-byte-0/74)

<div class="topic-metadata">

**Author:** [@Benjamin\_Mensah](https://community.infisical.com/u/Benjamin_Mensah)\
**Replies:** 2\
**Last updated:** [October 14, 2026, 10:31am UTC](https://community.infisical.com/t/acme-eab-secret-incompatible-with-traefik-lego-illegal-base64-data-at-input-byte-0/74 "2026-10-14T10:31:17Z")

</div>

When using Infisical as an ACME Certificate Authority for Traefik, the ACME client fails during EAB account registration with a Base64 decoding error. The same EAB secret works when pasted directly into the Traefik confi…

---

## [Add kms algorithms \> encrypt-decrypt:RSA-4096 | secure-import:PKCS#1](https://community.infisical.com/t/add-kms-algorithms-encrypt-decrypt-rsa-4096-secure-import-pkcs-1/77)

<div class="topic-metadata">

**Author:** [@sirajuddin](https://community.infisical.com/u/sirajuddin)\
**Replies:** 0\
**Last updated:** [October 13, 2026, 2:26pm UTC](https://community.infisical.com/t/add-kms-algorithms-encrypt-decrypt-rsa-4096-secure-import-pkcs-1/77 "2026-10-13T14:26:39Z")

</div>

Would like to see Infisical being parity \>99.99% in algorithm support with Industry Adopted Algorithms E2E tested PRs adding Algorithmic Coverage : Note : Written by Hand ( Limited Use of AI )

---

## [Support Supabase project-scoped access tokens- (#8527 )](https://community.infisical.com/t/support-supabase-project-scoped-access-tokens-8527/73)

<div class="topic-metadata">

**Author:** [@gaurang2456](https://community.infisical.com/u/gaurang2456)\
**Replies:** 2\
**Last updated:** [October 10, 2026, 8:45am UTC](https://community.infisical.com/t/support-supabase-project-scoped-access-tokens-8527/73 "2026-10-10T08:45:19Z")

</div>

Supabase project-scoped access tokens cannot access the account-level /v1/projects endpoint. As a result, creating or updating a Supabase App Connection with a project-scoped token fails credential validation with a 403 …

---

## [Automatic DigiCert CertCentral domain validation](https://community.infisical.com/t/automatic-digicert-certcentral-domain-validation/68)

<div class="topic-metadata">

**Author:** [@sinnwise](https://community.infisical.com/u/sinnwise)\
**Replies:** 1\
**Last updated:** [October 7, 2026, 7:26pm UTC](https://community.infisical.com/t/automatic-digicert-certcentral-domain-validation/68 "2026-10-07T19:26:55Z")

</div>

Hey team, Infisical’s DigiCert integration requests DNS TXT validation and polls DigiCert, but it doesn’t create the required TXT records using Infisical’s existing DNS integrations. If a domain isn’t already validated,…

---

## [Non secrets sync to Cloudflare Pages and Workers](https://community.infisical.com/t/non-secrets-sync-to-cloudflare-pages-and-workers/67)

<div class="topic-metadata">

**Author:** [@Rene\_Brongers](https://community.infisical.com/u/Rene_Brongers)\
**Replies:** 2\
**Last updated:** [October 7, 2026, 5:13am UTC](https://community.infisical.com/t/non-secrets-sync-to-cloudflare-pages-and-workers/67 "2026-10-07T05:13:37Z")

</div>

Infisical offers secret syncs to cloudflare workers and pages. I would like to be able to have all my vars in Infisical. However CF Pages envs also need vars defined as text instead of secrets. Created a sync for all e…

---

## [OAuth Support in the Agent Vault Proxy](https://community.infisical.com/t/oauth-support-in-the-agent-vault-proxy/66)

<div class="topic-metadata">

**Author:** [@edbo](https://community.infisical.com/u/edbo)\
**Replies:** 1\
**Last updated:** [October 5, 2026, 2:23pm UTC](https://community.infisical.com/t/oauth-support-in-the-agent-vault-proxy/66 "2026-10-05T14:23:06Z")

</div>

Hi, We’re starting to use the Agent Vault Proxy now which is working great so far. One thing that would make it a lot more powerful would be OAuth Support in the access bundles. Currently it’s just limited to basic/tok…

---

## [Per-service MITM request filter](https://community.infisical.com/t/per-service-mitm-request-filter/63)

<div class="topic-metadata">

**Author:** [@lucastheisen](https://community.infisical.com/u/lucastheisen)\
**Replies:** 2\
**Last updated:** [October 2, 2026, 5:48pm UTC](https://community.infisical.com/t/per-service-mitm-request-filter/63 "2026-10-02T17:48:10Z")

</div>

I have need for more advanced filtering (than simple host/path) before attaching credentials. One specific need is to ensure a git push is not to a protected branch. In order to do so, i will have to read the initial p…

---

## [Community PR Review Cadence](https://community.infisical.com/t/community-pr-review-cadence/62)

<div class="topic-metadata">

**Author:** [@hmacr](https://community.infisical.com/u/hmacr)\
**Replies:** 2\
**Last updated:** [October 2, 2026, 2:24pm UTC](https://community.infisical.com/t/community-pr-review-cadence/62 "2026-10-02T14:24:49Z")

</div>

Hey team, I’m curious to know if the team has bandwidth to support community contributions regularly. I totally understand that Infisical team was pretty much maxed out for the past few months, so wanted to understand th…

---

## [Tailscale + Infisical Self Hosted Video!](https://community.infisical.com/t/tailscale-infisical-self-hosted-video/61)

<div class="topic-metadata">

**Author:** [@Jake-Infisical](https://community.infisical.com/u/Jake-Infisical)\
**Replies:** 0\
**Last updated:** [September 30, 2026, 8:03pm UTC](https://community.infisical.com/t/tailscale-infisical-self-hosted-video/61 "2026-09-30T20:03:50Z")

</div>

Hey all! We just made a video on the combination of Infisical + Tailscale! Self host your secrets manager and access it from anywhere in the world.

---

## [Sync Secrets to Daytona Secret Store with Infisical!](https://community.infisical.com/t/sync-secrets-to-daytona-secret-store-with-infisical/58)

<div class="topic-metadata">

**Author:** [@Jake-Infisical](https://community.infisical.com/u/Jake-Infisical)\
**Replies:** 0\
**Last updated:** [September 23, 2026, 6:11pm UTC](https://community.infisical.com/t/sync-secrets-to-daytona-secret-store-with-infisical/58 "2026-09-23T18:11:21Z")

</div>

Hey all! We just launched Daytona Secret Syncs! If your agents run in Daytona sandboxes, you can now manage their keys in Infisical alongside every other secret your team uses. You can sync copies of secrets from Infis…

---

## [Certificate templates and subscribers will be removed on December 15, 2026](https://community.infisical.com/t/certificate-templates-and-subscribers-will-be-removed-on-december-15-2026/57)

<div class="topic-metadata">

**Author:** [@Sheen\_Capadngan](https://community.infisical.com/u/Sheen_Capadngan)\
**Replies:** 0\
**Last updated:** [September 22, 2026, 11:24pm UTC](https://community.infisical.com/t/certificate-templates-and-subscribers-will-be-removed-on-december-15-2026/57 "2026-09-22T23:24:48Z")

</div>

Certificate templates and PKI subscribers date back to the earliest version of Infisical Certificate Manager, before Applications. They have been superseded for a long time and see very little use today. They will be rem…

---

## [Mark secrets as sensitive/private](https://community.infisical.com/t/mark-secrets-as-sensitive-private/56)

<div class="topic-metadata">

**Author:** [@brady](https://community.infisical.com/u/brady)\
**Replies:** 1\
**Last updated:** [September 21, 2026, 8:49pm UTC](https://community.infisical.com/t/mark-secrets-as-sensitive-private/56 "2026-09-21T20:49:55Z")

</div>

I would really like the ability to set secrets as “private” or “sensitive” and not have the value printed again.

---

## [Unable to update 2FA (No response from support emails in 90 days)](https://community.infisical.com/t/unable-to-update-2fa-no-response-from-support-emails-in-90-days/55)

<div class="topic-metadata">

**Author:** [@Webzetter](https://community.infisical.com/u/Webzetter)\
**Replies:** 6\
**Last updated:** [September 17, 2026, 7:42am UTC](https://community.infisical.com/t/unable-to-update-2fa-no-response-from-support-emails-in-90-days/55 "2026-09-17T07:42:23Z")

</div>

Hi team and community, I am reaching out here because I am currently facing a an issue with my account security and have been unable to get a response through the official support channels. The issue: I am trying to u…

---

## [Benchmark of Infisical KMS Port In Go](https://community.infisical.com/t/benchmark-of-infisical-kms-port-in-go/54)

<div class="topic-metadata">

**Author:** [@sirajuddin](https://community.infisical.com/u/sirajuddin)\
**Replies:** 1\
**Last updated:** [September 10, 2026, 7:28am UTC](https://community.infisical.com/t/benchmark-of-infisical-kms-port-in-go/54 "2026-09-10T07:28:08Z")

</div>

Infisical port to Go would reduce the baseline resources required for self deployed instances I worked on redesigning the Infisicial KMS backend that acheives sub 5ms latency , The key points from benchmark 3x faster…

---

## [Dynamic Secrets Explained: Why Rotation Isn't Enough](https://community.infisical.com/t/dynamic-secrets-explained-why-rotation-isnt-enough/51)

<div class="topic-metadata">

**Author:** [@Jake-Infisical](https://community.infisical.com/u/Jake-Infisical)\
**Replies:** 0\
**Last updated:** [September 4, 2026, 11:57am UTC](https://community.infisical.com/t/dynamic-secrets-explained-why-rotation-isnt-enough/51 "2026-09-04T11:57:33Z")

</div>

Hey all! We just dropped a new educational video breaking down static credentials, secret rotation, and dynamic secrets, including leases, TTLs, revocation, and the tradeoffs behind each model. Hope you find it useful! …

---

## [Secret sync to cloudflare](https://community.infisical.com/t/secret-sync-to-cloudflare/32)

<div class="topic-metadata">

**Author:** [@robbglen](https://community.infisical.com/u/robbglen)\
**Replies:** 1\
**Last updated:** [September 4, 2026, 2:03am UTC](https://community.infisical.com/t/secret-sync-to-cloudflare/32 "2026-09-04T02:03:11Z")

</div>

infisical offers secret syncs to cloudflare workers and pages, but cloudflare recently released a cloudflare secret store. are there any plans to support this as a new destination?

---

## [Honey Tokens in Infisical: Detect Secret Leaks Before Attackers Win](https://community.infisical.com/t/honey-tokens-in-infisical-detect-secret-leaks-before-attackers-win/50)

<div class="topic-metadata">

**Author:** [@Jake-Infisical](https://community.infisical.com/u/Jake-Infisical)\
**Replies:** 0\
**Last updated:** [September 3, 2026, 12:43am UTC](https://community.infisical.com/t/honey-tokens-in-infisical-detect-secret-leaks-before-attackers-win/50 "2026-09-03T00:43:02Z")

</div>

What it covers: What honey tokens are and how to plant decoy credentials that alert you the moment someone tries to use them. Companion guide: Honey token setup Questions? Reply below.

---

## [Automate Vercel Environment Variables with Infisical](https://community.infisical.com/t/automate-vercel-environment-variables-with-infisical/49)

<div class="topic-metadata">

**Author:** [@Jake-Infisical](https://community.infisical.com/u/Jake-Infisical)\
**Replies:** 0\
**Last updated:** [September 3, 2026, 12:41am UTC](https://community.infisical.com/t/automate-vercel-environment-variables-with-infisical/49 "2026-09-03T00:41:00Z")

</div>

What it covers: Setting up a secret sync so your Vercel environment variables stay in lockstep with Infisical, with no manual copying between dashboards. Companion guide: Vercel sync Questions? Reply belo…

---

## [How to Manage .Env Variables in Docker (Compose, Secrets & More)](https://community.infisical.com/t/how-to-manage-env-variables-in-docker-compose-secrets-more/48)

<div class="topic-metadata">

**Author:** [@Jake-Infisical](https://community.infisical.com/u/Jake-Infisical)\
**Replies:** 0\
**Last updated:** [September 3, 2026, 12:38am UTC](https://community.infisical.com/t/how-to-manage-env-variables-in-docker-compose-secrets-more/48 "2026-09-03T00:38:40Z")

</div>

What it covers: The options for handling environment variables in Docker, where each falls short, and how to inject secrets from Infisical into containers and Compose stacks. Companion guide: Inject secret…

---

## [The Infisical Kubernetes Operator: Sync Secrets Into Your Cluster](https://community.infisical.com/t/the-infisical-kubernetes-operator-sync-secrets-into-your-cluster/47)

<div class="topic-metadata">

**Author:** [@Jake-Infisical](https://community.infisical.com/u/Jake-Infisical)\
**Replies:** 0\
**Last updated:** [September 3, 2026, 12:36am UTC](https://community.infisical.com/t/the-infisical-kubernetes-operator-sync-secrets-into-your-cluster/47 "2026-09-03T00:36:16Z")

</div>

What it covers: How to install the Infisical Kubernetes Operator and sync secrets from Infisical into native Kubernetes secrets your workloads can consume. Companion guide: Kubernetes Operator Questions? …

---

## [What is PKI? Certificates, CAs, and HTTPS Explained](https://community.infisical.com/t/what-is-pki-certificates-cas-and-https-explained/45)

<div class="topic-metadata">

**Author:** [@Jake-Infisical](https://community.infisical.com/u/Jake-Infisical)\
**Replies:** 0\
**Last updated:** [September 3, 2026, 12:35am UTC](https://community.infisical.com/t/what-is-pki-certificates-cas-and-https-explained/45 "2026-09-03T00:35:33Z")

</div>

What it covers: A from-scratch explainer of public key infrastructure: what certificates actually are, what a CA does, and how HTTPS ties it together. No Infisical knowledge required. Questions? Reply belo…

---

## [Infisical: A Complete Guide to Certificate Management](https://community.infisical.com/t/infisical-a-complete-guide-to-certificate-management/44)

<div class="topic-metadata">

**Author:** [@Jake-Infisical](https://community.infisical.com/u/Jake-Infisical)\
**Replies:** 0\
**Last updated:** [September 3, 2026, 12:28am UTC](https://community.infisical.com/t/infisical-a-complete-guide-to-certificate-management/44 "2026-09-03T00:28:52Z")

</div>

What it covers: A guided overview of Infisical Certificate Manager: CAs, issuance, renewal, syncs, and the mental model behind it all. Watch this first if you’re new to the PKI product. Companion guide: Is…

---

## [SCEP Certificates in Intune with a Third-Party CA (Full Setup)](https://community.infisical.com/t/scep-certificates-in-intune-with-a-third-party-ca-full-setup/43)

<div class="topic-metadata">

**Author:** [@Jake-Infisical](https://community.infisical.com/u/Jake-Infisical)\
**Replies:** 0\
**Last updated:** [September 3, 2026, 12:26am UTC](https://community.infisical.com/t/scep-certificates-in-intune-with-a-third-party-ca-full-setup/43 "2026-09-03T00:26:02Z")

</div>

What it covers: A full walkthrough of issuing certificates to Intune-managed devices over SCEP using Infisical as the CA, from enrollment profile to issued cert. Companion guide: SCEP enrollment Questions…

[Next page](https://community.infisical.com/latest.md?page=1)
