GitHub org/repo secrets can't be secured — use environments instead
AccBalanced · x · 2026-11-03
thdxr warns that GitHub org- and repo-level secrets are fundamentally insecure: any team member with write access getting compromised lets attackers exfiltrate them. His fix: put secrets in GitHub Environments protected by protection rules.
More from coding & agent
- Developer turns iPhone's unused LiDAR into a room-to-3D-world scanner with coding AI — thisguyknowsai · 2026-11-03
- SteerCamp launches: crews of cloud-computer AI agents for ops, support and finance teams — pramodk73 · 2026-11-03
- New Omarchy User Blown Away in 30 Minutes: Old Gaming PC Becomes an Agent Hub — mark_k · 2026-11-03
- LetterBox adds granular API key permissions, agents can create Drafts over MCP — rchardkovacs · 2026-11-03
- Free image-to-3D ComfyUI workflow runs on just 8GB VRAM with a local Gradio app — TheLocalLab · 2026-11-03
- Tsinghua study: continual harness self-evolution causes severe catastrophic forgetting in coding agents — Shangziqi Zhao · 2026-11-03