Originally published on the Oye Collective blog.
You paste a .env into a Claude Code session to debug a failing deploy. The agent reads it, fixes the config, and moves on. Twenty minutes later the task is done and you close the terminal.
The secret is still there. Not in the terminal, in the transcript. Every agent session writes a JSONL file to disk, and that file now holds your production database URL in clear text, sitting in a directory you will never think about again.
Multiply that by a few hundred sessions. That is the actual state of most machines running coding agents today.
When scanning is synonymous with leaking
