My AI agent revoked my git access. Honestly? Fair. 🔒
If you ever push an API key to a public repo:
- Kill the old key (deleting the commit does NOT delete the key)
- Make a new one
- Put it in a .env file
- Add .env to .gitignore
Bots scan GitHub for keys within minutes. Two-minute fix, $400 lesson.
Comment CHECKLIST and I'll send you the setup checklist.
Commented CHECKLIST? No need to wait for a DMPushed an API key to GitHub? The checklistWhat to do in the first ten minutes after a key goes public, in the right order, and the four-line setup that stops it happening again.