Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

If you have your PayPal creds in your repository, you are doing it wrong.




.gitignore is a thing

Which every AI tool I’m aware of respects and ignores by default.

Why is it that they can add new env variables then?

It is trivial to append to files without reading them. Also, no AI provider even wants your secrets, they are a liability. Do whatever you want though, I'm not here to convince you of anything.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: