#DevSecOps

Shift-left security for AI-augmented teams: secret scanning, CI gates, and the new attack surface that lives inside the prompt loop.

6 articles

EngineeringMay 21, 2026 · 10 min read
Tene in GitHub Actions: secrets that survive AI-written workflows
Five ways AI-written GitHub Actions workflows leak API keys, and the local-vault pattern that closes the gap on any runner.
#devsecops#tutorial+2 more
Vibe CodingApr 30, 2026 · 10 min read
60% of vibe-coded apps leak API keys. Here's the missing step.
A Q1 2026 audit found 60%+ of vibe-coded apps ship API keys to public repos. Discipline isn't the fix — workflow is. The 60-second swap that ends it.
#tene#security+2 more
Vibe CodingApr 28, 2026 · 10 min read
MCP RCE: when an agent's tools become your attack surface
Every MCP server you install is a local process with access to your filesystem, network, and env. The threat model — and how to scope it before it costs you.
#claude-code#security+2 more
ToolsApr 27, 2026 · 7 min read
Multi-environment secrets without a cloud account
Manage dev, staging, and prod secrets in a single encrypted vault — no cloud SaaS, no .env.staging files committed to git. A solo-dev workflow.
#tene#devsecops+2 more
Vibe CodingApr 23, 2026 · 5 min read
Your .env is not a secret. AI can read it.
Plaintext .env files are a liability in the AI coding era. Here is why the AI-agent threat model changes the math, and what to replace .env with.
#security#devsecops+1 more
ToolsApr 23, 2026 · 5 min read
dotenv-vault is shutting down. Here's what to migrate to.
The dotenv-vault Pro tier was discontinued in February 2026. Here is a honest side-by-side of the migration options — Doppler, Infisical, HashiCorp Vault, and tene — and a one-command path off the old product.
#tene#comparison+2 more