/dev/null
Sign in

Commit

8e89047

Marc@stausmar
I just started a new project, and Claude starts reading the .env file... 🤔 What's the best way to handle environment variables locally? I think, just putting them in .env files is not the best way anymore, in times of AI agents.
Brian@brian-bill
Well, it's a dev environment, just set development secrets in it. This beats the whole AI messing with your prod instances paranoia.
Marc@stausmar
Not all providers offer the possibility to generate multiple API keys, for different purposes.
Brian@brian-bill
You can rotate your keys after awhile? If they don't support that, probably a disaster in making no matter the choice you pick.
Aidan Casey@aidan-casey
Eh, @stausmar has a very legitimate concern from my view. Even in a dev environment external services are legitimately interacted with. A data warehouse, an API service, etc. As nice as it would be, as developers we don’t always have the choice of picking which services or tools we are integrating. Exposure for any amount of time (rotatable key or not) is not ideal or in many cases acceptable.

commit 8e89047