Following on the CodeRabbit exploit, this details why secrets in env are a big no-no. It’s a good illustration of why my “littlesecrets” tool would be a good alternative.