Clarify credential handling in AGENTS instructions
This commit is contained in:
@@ -50,6 +50,8 @@
|
||||
- When a credential (password, API key, token, etc.) is needed to complete a task, use the `pass` utility to retrieve it.
|
||||
- The pass password store lives at `~/.password-store/`.
|
||||
- Use `pass show <entry>` to retrieve a secret, or `pass find <search-term>` to locate entries.
|
||||
- Never write passwords or other credentials directly into version-controlled files in any repo (for example `dotfiles/claude/settings.local.json`).
|
||||
- Provide credentials to tools/config at runtime via environment variables or inline `pass` usage instead of committing them.
|
||||
- Never hardcode credentials or store them in plain text files.
|
||||
|
||||
## Project links (local symlink index)
|
||||
|
||||
Reference in New Issue
Block a user