High severity. Storing sensitive information in plaintext is a common misconfiguration that can lead to unauthorized access if the machine is compromised.

The advisory discusses the security risks associated with storing secrets in plaintext .env files and recommends a method to securely manage secrets using tools like 1Password or Keychain.

Action Items:
  • Evaluate and migrate from plaintext .env file storage to a secure secret management solution such as 1Password CLI or macOS Keychain.
  • Implement runtime secret injection techniques to avoid storing secrets on disk.
Source →