Secrets that never hit a git commit still reach your AI tools
A clean git history does not mean a key stayed private. Most teams scan commits for secrets, and that is a good habit. But a key can reach an AI tool without ever touching a commit. Three quieter paths The first is the config file. Many AI tools and MCP servers read settings from a local file, and…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-11-06 12:49 · DEV Community — AI
Secrets that never hit a git commit still reach your AI tools