DOP 376: Secrets Management for AI Agents
Show notes
#376: How many secrets can your coding agent reach right now? You gave it a token so it could get work done. It might have passed that token to every agent it spun up. Somewhere along the way, you stopped reading the permission prompts and started clicking allow.
At the same time, hardcoding secrets in our code is still the most common answer for how secrets are managed. Developers get paid to close tickets, not to lower risk, and the agents just copy whatever they find in the repo.
In this episode, we speak with Dwayne McDaniel, Principal Developer Advocate at GitGuardian, about managing secrets when agents are the ones using them, and why the better answer might be no secrets at all.
Dwayne's contact information:
LinkedIn: https://www.linkedin.com/in/dwaynemcdaniel/
YouTube channel:
https://youtube.com/devopsparadox
Review the podcast on Apple Podcasts:
https://www.devopsparadox.com/review-podcast/
Slack:
https://www.devopsparadox.com/slack/
Connect with us at: