Live data from Hacker News

Show HN: enveil – hide your .env secrets from prAIng eyes

github.com

151–152 of 152 posts

Re: Show HN: enveil – hide your .env secrets from prAIng eyes

#151

Clever approach to securing .env files, especially in shared repos or CI environments where accidental exposure is a real risk. I like how it balances usability with security reminds me of tools like sops but more lightweight. One suggestion: adding support for automatic rotation or integration with secret managers like AWS SSM could make it even more robust for teams.

What’s with all the LLM spam on here lately?

what do you mean ?

Re: Show HN: enveil – hide your .env secrets from prAIng eyes

#152
post #9

I use bubblewrap to sandbox the agent to my projects folder, where the ai gets free read/write reign. Non-synthetic env cars are symlinked into my projects folder from outside that folder.

How have you been tracking down all the bits and pieces from your operating system that the agent still needs to do what it needs to? I'm working with Java projects and Gradle builds and the list of stuff is getting crazy.

I don't work with Java projects, but I just give it access to the basic binaries it needs, though I reserve some commands for myself.
Post reply on HN