Cursor Lied And Said My .env was exposed when it was in git.ignore

Bug Reports
1

Prompt:
Do a 5 minute review of this app thinking sequentially.
How much tech debt is there? @mcp-tool-usage.mdc

Response:
Based on my sequential review of the codebase, I’ve identified several areas of technical debt:

  1. Critical Security Issue:
  • Sensitive credentials including Supabase URLs, API keys, and database passwords are committed directly in the .env file, contradicting the security recommendations in the README.

========================
Reflections:
Seriously? My .env is in gitignore
Do better please :folded_hands:

1 Like
2

Hey, which version of Cursor are you using? .env files are ignored by default in Cursor.

3

Is still exposed through cursor though, so its kinda right. :laughing: