<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>DEV Community: Noe Lienard</title>
    <description>The latest articles on DEV Community by Noe Lienard (@noe_lienard_62a3ba212c44e).</description>
    <link>https://dev.to/noe_lienard_62a3ba212c44e</link>
    <image>
      <url>https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3987567%2Fe1ad0d5b-d32a-4f6c-83f0-4393442c8ce5.png</url>
      <title>DEV Community: Noe Lienard</title>
      <link>https://dev.to/noe_lienard_62a3ba212c44e</link>
    </image>
    <atom:link rel="self" type="application/rss+xml" href="https://dev.to/feed/noe_lienard_62a3ba212c44e"/>
    <language>en</language>
    <item>
      <title>Elding: Your API Key Never Enters Your Application's Memory</title>
      <dc:creator>Noe Lienard</dc:creator>
      <pubDate>Sun, 21 Jun 2026 12:46:02 +0000</pubDate>
      <link>https://dev.to/noe_lienard_62a3ba212c44e/elding-your-api-key-never-enters-your-applications-memory-89</link>
      <guid>https://dev.to/noe_lienard_62a3ba212c44e/elding-your-api-key-never-enters-your-applications-memory-89</guid>
      <description>&lt;p&gt;I’m building Elding (elding.app), a tool where your API key never touches your app’s memory, neither in development nor in production. Everything is handled in isolation through a proxy.&lt;/p&gt;

&lt;p&gt;No more  Git leaks, Slack leaks, or AI agents like Cursor and Claude reading everything.&lt;/p&gt;

&lt;p&gt;It’s still early stage, and I’m looking for real feedback from developers who ship apps every day.&lt;/p&gt;

&lt;p&gt;→ Try it: &lt;a href="https://elding.app/" rel="noopener noreferrer"&gt;elding.app&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;What do you think?&lt;/p&gt;

</description>
      <category>api</category>
      <category>security</category>
      <category>showdev</category>
      <category>tooling</category>
    </item>
    <item>
      <title>Does it bug anyone else that Cursor/Claude can read your .env?</title>
      <dc:creator>Noe Lienard</dc:creator>
      <pubDate>Tue, 16 Jun 2026 14:13:30 +0000</pubDate>
      <link>https://dev.to/noe_lienard_62a3ba212c44e/does-it-bug-anyone-else-that-cursorclaude-can-read-your-env-1a1d</link>
      <guid>https://dev.to/noe_lienard_62a3ba212c44e/does-it-bug-anyone-else-that-cursorclaude-can-read-your-env-1a1d</guid>
      <description>&lt;p&gt;Was debugging with Cursor the other day and it just casually cat'd my .env to "check the config". Sat there for a sec like... wait, my OpenAI and Stripe keys just went into the model's context?&lt;/p&gt;

&lt;p&gt;Tried .cursorignore but apparently in agent mode it can still read whatever it wants via the shell.&lt;/p&gt;

&lt;p&gt;Maybe I'm being paranoid. Do you guys actually care about this, or is it a non-issue in practice? Curious how people handle it (or if they just don't).&lt;/p&gt;

</description>
      <category>ai</category>
      <category>discuss</category>
      <category>privacy</category>
      <category>security</category>
    </item>
  </channel>
</rss>
