Secure secret storage is not enough if an AI agent can still read the credential at runtime. This article examines credential brokering as a way to separate service access from credential possession.
Prompt injection becomes dangerous when AI agents can access tools, data, and external systems. Secure architectures must assume it will happen and limit the damage.
GitHub repositories are no longer just source control. Modern repositories act as software supply-chain entry points, making visibility, governance, SBOMs, and static analysis increasingly important security controls.
AI tools don't need your .env file. Runtime access is enough. That's the shift most developers haven't caught up with yet.