We should add some facility to enable passing secrets to the sandbox. For example, login credentials for fetching a private code repo or connecting to a database.
It could be a new secure input field with JSON object called sercetEnvVars, whose key-values would then be set to shell and API processes in the sandbox.
The problem is that the AI-generated code would have access to the secrets, too. So maybe we could add a flag like “Discard secrets after start” which would ensure we wipe them away after the initial “Shell script” is executed.
This requires a deeper thought.
We should add some facility to enable passing secrets to the sandbox. For example, login credentials for fetching a private code repo or connecting to a database.
It could be a new secure input field with JSON object called
sercetEnvVars, whose key-values would then be set to shell and API processes in the sandbox.The problem is that the AI-generated code would have access to the secrets, too. So maybe we could add a flag like “Discard secrets after start” which would ensure we wipe them away after the initial “Shell script” is executed.
This requires a deeper thought.