Remix.run Logo
▲ GeoAtreides a day ago

"git add . " considered harmful

▲cassianoleal a day ago | parent | next [-]

From TFA:

> Often Claude commits the file itself. In 539 of the 1,105 repos with a real secret that we traced, a commit co-authored by Claude changed the file. Those commits name every recent model, from Sonnet 4.5 to Opus 5.5.

▲hleszek a day ago | parent | prev | next [-]

always was

▲polarsanel a day ago | parent [-]

It's the plaintext secrets that are harmful.

▲AgentOrange1234 a day ago | parent [-]

Yeah like... you are writing passwords on the command line? All of these are already leaking into your .bash_history or similar so what are you doing my dude...

▲cobbzilla a day ago | parent | prev [-]

I’ve set a hard rule for my agents to “never add all files, never commit all files, always reference the specific files you are adding or committing”

They violate it so regularly that my “git” command is now a wrapper, when the agent fucks up and tries to add/commit-all anyway, it now gets a nastygram error chiding it for not following instructions.

▲grepular 21 hours ago | parent [-]

I just mount .git read-only in my sandbox. That way I don't need to worry about it violating my safeguards.

▲ 13 hours ago | parent [-]
[deleted]