Open-source .sct replaces .env files with macOS Keychain to hide secrets from AI agents
wommmmmmmmm · reddit · 2026-11-10
A developer released .sct, an open-source replacement for .env files, arguing that .env is the wrong primitive in the AI-agent era since agents can easily read and leak your secrets. .sct stores all dev secrets in a single directory secured by macOS Keychain, loads them at runtime via an SDK (bun add dotsct), supports secure scoped access for agents, and enables sharing env vars with teammates over AirDrop or a Relay. Fully free and open source, with a desktop app and docs at dotsct.pages.dev.
More from coding & agent
- Tripwire Pilot publishes a public list of 542 GitHub bounty-spam accounts — damnGruz · 2026-11-10
- Vera launches gyms, benchmarks and agents for cloud infrastructure operations — tianyin_xu · 2026-11-10
- Illos.dev sells $69 agent skills that draw on-style SVG illustrations — sull · 2026-11-10
- Wisdom: an open-source local ledger for Claude Code and Codex agent sessions — Fit-Fail-3369 · 2026-11-10
- Claude Code deletes session transcripts after 30 days by default — one config line keeps them — Kyrannio · 2026-11-10
- Morph launches Ultra: unlimited Kimi and DeepSeek for $200/month — zack_overflow · 2026-11-10