4 ms·
You've never temporarily put a key into a file while testing? Or accidentally pasted one for a second then deleted it? Can you say the same for your entire team
by ianlevesque 4y ago
You've never temporarily put a key into a file while testing? Or accidentally pasted one for a second then deleted it? Can you say the same for your entire team or company?
Since Copilot is constantly making new suggestions, a momentary entry is all it takes.
- PartiallyTyped 4y agoCopilot doesn't retrain on data generated by you in the moment; so I don't see why this is an issue unless you push the files - with the keys - to github.
- ianlevesque 4y agoThe model is evaluated on the server, using the content of your files.
- ehutch79 4y agocredentials should never be committed. By the time you're ready to commit code, you should be reading from the environment or a config outside of the codebase, or at least .gitignore'd Once that key is in your git history, it's in the history. You might be able to edit it, but it's going to be a nightmare to do it.
- ianlevesque 4y agoI'm not sure why you're referring to committed. The model is being evaluated on the server, with content you haven't yet committed.