{"repo":"NousResearch/hermes-agent","public_id":"1583","display_label":"Plaintext secrets in .env files security concern","summary":"A reported security issue identifies that profile .env files expose plaintext secrets including LITELLM_MASTER_KEY and others. A related feature request proposes adopting Varlock to mitigate the risk of .env secret exfiltration.","subsystem":"agent","counts":{"members":2,"open_issues":0,"open_issues_distinct":0,"open_prs":0,"closed_issues":2,"merged_prs":0,"attempt_prs":0},"landed_fix":null,"resolution":{"state":"unresolved","by":null},"freshness":{"state":"never_verified","last_verified_at":null,"is_stale":false},"grouping":{"backbone":"LLM_ONLY","link_density":0.36},"fix_edges":[],"members":[{"kind":"issue","number":1583,"title":"[Feature]: Mitigate plaintext secret (.env) exfiltration risk by adopting Varlock","url":null,"state":"closed"},{"kind":"issue","number":45159,"title":"CRITICAL: Profile .env files contain plaintext secrets (LITELLM_MASTER_KEY + 18 others)","url":null,"state":"closed"}],"trust":{"default_tier":"verified","includes_suggested":false}}