Secrets
9 guides tagged “Secrets”.
- Deploying AI-Generated Apps to Production: A Vibecoder's Checklist Your AI wrote the app. Now here's every step between 'it works on my machine' and 'it's running in production.' Deployment, monitoring, secrets, databases, and the checklist your AI didn't include.
- The 15 Security Failures Your AI Coding Assistant Ships by Default AI coding assistants default to SQL injection, hardcoded secrets, missing access controls, and 12 other security failures. Here's every one, with the fix and the linked guide.
- InfoSec for Vibecoders: Every Security Concept Your AI-Generated Code Gets Wrong Your AI coding assistant ships SQL injection, exposed secrets, and broken access control by default. Learn every infosec concept you need to catch these before they hit production. 40+ linked guides.
- How to Find and Remove Secrets From Git History Deleting a secret from your code doesn't remove it from git history. Find leaked keys with gitleaks, scrub history, and rotate what leaked.
- Why Do .env Files Keep Leaking Secrets? .env files leak because they're easy to commit by mistake and AI assistants have no convention against it. Learn the failure and how to stop it.
- Why Your Frontend API Keys Are Not Secret Any key shipped in frontend JavaScript can be extracted by anyone. Learn what frontend keys can and can't protect, and how to gate access properly.
- How to Manage Secrets and Environment Variables Properly Store secrets outside your code: environment variables for config, a secret manager for sensitive values, and never commit .env files. A practical guide.
- How to Scan Your Codebase for Hardcoded Secrets Find API keys and tokens committed to your repo with secret scanners like Gitleaks and TruffleHog, and stop new leaks in CI. A practical tutorial.
- How to Automate API Key Rotation Automate API key rotation so leaked credentials stop working quickly. A practical guide: inventory, short lifetimes, and a rotation job.