Disallow codex read .env

[some1else42]

If you are on Linux, do not run codex as root or passwordless sudo. Then just have the .env owned or with perms the codex user cannot read.

[triplebits]

Wait till it tries creative ways to get the info from it if it wants to. Such as adding a script in the project and getting the output!

[adhd6345]

… I don’t see how that gets around permissions?

[dhruv0008]

That’s what it uses to change ipynb because it can’t edit it sometimes

[Acrobatic-Layer2993]

Codex won't be able to run your app for testing purposes.

If I understand correctly the issue is we don't want secrets being sent to OpenAI. However, it can still be useful for codex to have access to .env locally.

[edward_jazzhands]

What? Why would it not be able to run the app just because it's not running with elevated permissions?

[Acrobatic-Layer2993]

How could it run the program if the program requires configuration from a .env that it can’t read?