Topic
Storage, brokering and injection of API keys and credentials, including .env handling, vaults and per-host credential injection.
GitHub now sells Advanced Security as two SKUs, at $19 and $30 per active committer per month. Neither one routes a finding to an owner or enforces a deadline.
Reality
Pageloot's leak was caught by a search box, not a control. "Anyone with the link" behaves like public, and most secrets programs never look inside the documents where credentials actually get parked.
Reality
A dev.to writeup makes a point worth stealing: the secret leaves your machine in a prompt, not a commit. The proposed fix is a local proxy that masks values before egress.
Reality
A Hacker News explainer makes the structural case: plaintext configs, unrotated tokens, broad scopes and prompt injection put agent plumbing outside secrets management.
Reality
SecretSpec's dotenv-ng 1.0 makes dollar signs literal after dotenvy silently dropped parts of a bcrypt hash. The damage surfaced as an authentication failure, far from the parser that caused it.
Reality
A developer audited the IAM policy on his own Bedrock agent and found one statement scoped to a single secret and another that reaches every Claude model, in every region Bedrock runs.
Reality
A developer's argument that .env access is an architectural bug in agent workflows, and a small Go CLI that brokers credentials at the process and transport boundary instead.
Reality