I chmod 600'd My Agent's .env and Called It Done. The Key Was in Four Other Places, Starting With My Shell History.
The audit started because a reader asked me a question I couldn't answer A reader emailed me in October: "How do you rotate your agent's API key?" My honest answer was: I open .env , paste a new key, restart the service. That's not a rotation, it's a replacement. And I had no idea whether the old k…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-11-05 01:04 · DEV Community — AI
I chmod 600'd My Agent's .env and Called It Done. The Key Was in Four Other Places, Starting With My Shell History.