omerta
Summary
Omerta is a developer tool that helps catch .env secrets accidentally leaking into git repositories, preventing sensitive credential exposure.
Similar Articles
GitLost: We Tricked GitHub's AI Agent into Leaking Private Repos
Noma Labs discovered a critical prompt injection vulnerability in GitHub's Agentic Workflows, allowing unauthenticated attackers to exfiltrate data from private repositories by posting a crafted GitHub issue in a public repository of the same organization.
GitHub Actions leaking secrets when Miri output is cached
Miri, a Rust tool, stores all environment variables in the target directory, which when cached in GitHub Actions can leak secrets to pull requests. The Rust team has implemented a fix to only preserve specific variables and advises users to check their CI setups for vulnerabilities.
OpenCode Hacked: User credentials leaked
OpenCode disclosed a security breach involving a large-scale distillation attack that leaked user credentials, impacting 1.4% of OpenCode Console users. The company is working with Anthropic, OpenAI, and Google to remediate the ongoing incident.
Giving coding agents shell access feels insane. How are people handling secrets?
The author expresses concern about granting coding agents shell access, noting they can read sensitive files like .env and credentials, and asks the community for practical secret-handling patterns before letting agents touch real repositories.
The Vercel breach: OAuth attack exposes risk in platform environment variables
A June 2024 intrusion disclosed in April 2026 saw attackers abuse a compromised third-party OAuth app to access Vercel’s internals and expose customer environment variables, spotlighting OAuth supply-chain risks and platform secret-handling flaws.