Your secrets don't need a git commit to leak into an AI tool
Dimitris Kyrkos
- Comments109
Dimitris Kyrkos
Most of us have the "don't commit secrets" reflex drilled in. Pre-commit hooks, secret scanners in...
Most of us have the "don't commit secrets" reflex drilled in. Pre-commit hooks, secret scanners in CI, .env in .gitignore. Good. That covers the repo.
When you work with an AI coding assistant, what leaves your machine isn't just the file you're editing. It's whatever you paste, whatever the extension decides is relevant, and whatever the agent reads while it's "helping." The security boundary now includes the editor extension, the chat history, any telemetry, and every service that processes that context on the way to the model and back.
Excerpt from DEV Community ↗, by Dimitris Kyrkos .
Your secrets don't need a git commit to leak into an AI tool was first seen on DEV Community · Top this week on Oct 30, 2026. Since then it has appeared in 82 checks on 4 different days. Its best position was #18 of 30, reached on Nov 2, 05:43 UTC. It dropped off the list after Nov 2, 10:43 UTC.
Position on DEV Community · Top this week at every check (lower is better).
Best rank per day (UTC).
Platform metric as reported by DEV Community.
Archived daily, weekly and monthly lists that include this entry.
Not at the moment. It was last on the list on Nov 2, 10:43 UTC, after 4 days of trending.
#18 on DEV Community · Top this week, on Nov 2, 05:43 UTC. Trendoday checks this list every 60 minutes.
It was first seen on Oct 30, 2026 and has been on the list on 4 days (82 checks) since.