Topic · 7 stories
7 stories tagged secrets on AI Tamer, newest first.
Northflank declared a security incident on 30 October and told users to rotate all secrets. It relays user reports that stolen AI keys were used.
Railway paused deploys, killed API tokens and reset bucket and GitHub credentials. It says to roll every environment variable and check AI provider bills.
Infisical says Agent Vault is in preview on its cloud and as a self-hosted proxy. Agents hold placeholders, and the proxy swaps in real HTTP credentials. The open-source repo was created in March 2026.
Kubernetes refreshes ordinary Secret volume files eventually, but a subPath mount stays on its old content. Credential rotation also needs an application reload or a Pod rollout.
BuildKit secret mounts make credentials available only to the build instruction that needs them. ARG, ENV and copied files can disclose values through image metadata, layers or cache.
API keys rarely leak through the vault. They leak through a command line other users can read, a URL that gets logged, and a conversation transcript that gets archived.
Agent logs are tempting to fill with everything: prompts, tool calls, environment, full requests. A short list of what must never land in them, and why scrubbing has to happen before the write.
