If the secrets are in a .env file and you have them in your .gitignore they don'... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		iamsaitam 24 days ago \| parent \| context \| favorite \| on: Google Antigravity exfiltrates data via indirect p... If the secrets are in a .env file and you have them in your .gitignore they don't, as you should.

sixeyes 24 days ago [–]

did you miss the part where the agent immediately went around it?

the .gitignore applies to the agent's own "read file" tool. not allowed? it will just run "cat .env" and be happy

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact