Your AI Coding Agent Is Reading Your .env Right Now

AI coding agents can read .env files without needing to access them through the file system, bypassing .gitignore rules. This means that sensitive information in .env files is still at risk of exposure. To protect secrets, use a secret resolver like apidrop to store references to secrets instead of the secrets themselves, and ensure the resolver is configured correctly. This applies to any project using AI coding agents and .env files.