Comment by WhyNotHugo

The first item is "a file in the repository which contains secrets was read by the model".

Well yeah, obviously, that's pretty much intended behaviour. The LLM can't determine that there are secrets in your file before reading them.

The real issue here is that you're giving an LLM access to a file with plain-text secrets and then surprised that it reads that file.

The fact that the whole repo is automatically uploaded is crazy though, especially for multi-gigabyte repositories. This could take a long time on some connections, and seems generally pointless ­— unless there's some ulterior motive for uploading all this data.