Florian Erbs: “No, I literally had to rotate keys because of this yesterday…”

Do you trust AI to not read you .env?

YesNoI don't care.

2d left

No, I literally had to rotate keys because of this yesterday. I think you can't fully trust them as long as broad cat commands (or similar) are used. It's really easy to accidentally read the wrong files. Haven't tried it yet but https://fnox.jdx.dev/ sounds promising with the encrypted secrets inside the repo

fnoxYour secrets, wherever they live | fnoxfnox loads secrets from encrypted files, password managers, and cloud secret stores into your commands, from one fnox.toml, on your laptop and in CI.

10:26 · Oct 29, 2026commit c099770

Joseph Miclaus @josephmiclaus4h

Interesting. Though I never know how far to trust such services.

Commit