Skip to content

Conversation

@kevinbackhouse
Copy link
Collaborator

Update to recommend using codespace secrets.

Copilot AI review requested due to automatic review settings December 16, 2025 12:31
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR improves the security guidance in the README by recommending GitHub Codespaces secrets for managing the AI_API_TOKEN and discouraging storing secrets on disk.

Key changes:

  • Added instructions for setting environment variables in the terminal
  • Introduced recommendation to use GitHub Codespaces secrets with a link to the settings page
  • Changed .env file guidance to explicitly discourage storing secrets on disk
  • Removed token examples (AI_API_TOKEN and GH_TOKEN) from the .env example section

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Co-authored-by: Copilot <[email protected]>
Copilot AI review requested due to automatic review settings December 16, 2025 12:42
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated 2 comments.


💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Co-authored-by: Copilot <[email protected]>
Copilot AI review requested due to automatic review settings December 16, 2025 12:59
@kevinbackhouse kevinbackhouse marked this pull request as ready for review December 16, 2025 12:59
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated no new comments.


💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@m-y-mo
Copy link
Contributor

m-y-mo commented Dec 16, 2025

Maybe add similar advice for GH_TOKEN as well?

@kevinbackhouse
Copy link
Collaborator Author

Maybe add similar advice for GH_TOKEN as well?

done

@kevinbackhouse kevinbackhouse merged commit 189004a into GitHubSecurityLab:main Dec 16, 2025
9 checks passed
@kevinbackhouse kevinbackhouse deleted the secret-advice branch December 16, 2025 16:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants