──[ ▮ ]── blog
Field notes on shipping AI-built apps safely
The mistakes Claude Code, Cursor and Codex make most — and how to catch them with a deterministic, local gate before they reach production.
Supabase & Firebase security
Secrets & API key leaks
secret-api-key-leaks
Detect Hardcoded Secrets: 6 Shapes, 4 Scanners
secret-api-key-leaks
Pre-Commit Secret Scanner vs CI: What Each Place Missed
secret-api-key-leaks
GitLab Secret Detection: 1 Finding, Then 0, Then 2
secret-api-key-leaks
GitHub Secret Scanner vs CLI Tools: gitleaks, TruffleHog, and ShipGuard Compared
secret-api-key-leaks
Secret Scanner for Next.js + Supabase Apps: Scan Before You Deploy
secret-api-key-leaks
What a Real Secret Scan Found in a Vibe-Coded App
shipguard · secrets