points by GeoAtreides 9 hours ago | 0 comments
"git add . " considered harmful
[–] hleszek 7 hours ago
always was
[–] polarsanel 6 hours ago
It's the plaintext secrets that are harmful.
[–] AgentOrange1234 1 hour ago
Yeah like... you are writing passwords on the command line? All of these are already leaking into your .bash_history or similar so what are you doing my dude...
[–] cobbzilla 3 hours ago
I’ve set a hard rule for my agents to “never add all files, never commit all files, always reference the specific files you are adding or committing”
They violate it so regularly that my “git” command is now a wrapper, when the agent fucks up and tries to add/commit-all anyway, it now gets a nastygram error chiding it for not following instructions.
> Often Claude commits the file itself. In 539 of the 1,105 repos with a real secret that we traced, a commit co-authored by Claude changed the file. Those commits name every recent model, from Sonnet 4.5 to Opus 5.5.