"We accidentally committed our API keys to production again..."
If this sounds familiar, you need better secret management in your dev workflow.
I built a Dev Containers feature that dynamically injects secrets from Infisical - no more .env files scattered everywhere.
You should consider running AI coding agents such as opencode inside Dev Containers because-
- Limits terminal commands to those that are consistent with the project
- Limits what the agent can access reducing prompt injection risks
Published a how-to article on my blog
@heyandras Amazing!
1 suggestion that would greatly benefit me (hopefully others as well) - option to backup selected volumes to S3.
It exists for Postgres templates for example but there are many custom / open source services that have important volumes as well. SQLite, file storage, etc