Thread

1. philbo · 1789735101 · focus · HN ↗

   Tangential, mildly amusing thing I noticed while implementing my own harness: GLM and particularly Deepseek are both fond of trying to read dotfiles and anything listed in your .gitignore files. I only noticed it because I have separate read scopes for project files, ignored files, dotfiles and external files, so the latter three always prompt me for approval.

   I'm sure there's a perfectly reasonable explanation for it, which has nothing at all to do with exfiltration of secrets, but it does amuse me when it happens. I imagine the labs have access to lots of secrets that various actors would like to get their hands on...

   (shameless plug for my own harness, which is open source and doesn&#x27;t have a backend to send any data to: <a href="https:&#x2F;&#x2F;www.opairdev.org&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.opairdev.org&#x2F; )

   1. thehamkercat · 1789752577 · focus · HN ↗

      i use sops

      Encrypt: sops encrypt --input-type dotenv --output-type dotenv .env &gt; secrets.enc.env

      then rm .env

      You can then run your script&#x2F;dev with: sops exec-env secrets.enc.env &#x27;docker xxxx&#x27; (it will ask you for your password, or touch-id to decrypt the secrets)

      I like this because this way the .env doesn&#x27;t sit in the directory at all, and is only passed to your dev environment and stays in it while it&#x27;s running

      Decrypt back to a file (if you ever want that): sops decrypt secrets.enc.env &gt; .env

      ---

      Well ofc, any agent can do docker inspect to get all those env vars, but atleast reading the dotfiles won&#x27;t do anything

      you can also edit the file with: sops --input-type dotenv --output-type dotenv secrets.enc.env

      1. booi · 1789758142 · focus · HN ↗

         1Password CLI has a similar feature I use all the time and share with the team.

Unofficial Hacker News client; not affiliated with Y Combinator.