A year later, OpenAI Codex still can't be told to skip your .env file (github.com)
The request is modest: a config file, like .gitignore, that keeps node_modules searchable but tells the agent to never read or send .env, *.pem, id_*, .aws and .ssh. It has sat open since August.
Engineers in the thread argue the feature is impossible to do safely: if the model can run shell, a stray 'rg foo' that matches an .env line uploads the secret anyway. The fix they keep naming is not a blocklist but a sandbox.
Sign in to save