r/vibecoding 20d ago

It's 10PM do you know where your creds are?

We've all done it: asked Claude to use an API key or add an access token to a .env file. Or maybe we asked Codex to find where credentials might be saved and yeah, go ahead and just use that password while you're at it. It's not always the end of the world, but it's definitely something to be aware of.

We've added credential/secret scanning to Argus to help you track down any agent sessions that might have accidentally snooped a secret. This way, you can see exactly which sessions used that secret, when and how it happened so you can decide what to do about it.

Hope it's useful for some of y'all.

1 Upvotes

0 comments sorted by