Built it in Windsurf? Ember has one question about your .env

Windsurf is now called Devin Desktop, but Ember sniffs it the same.

Here's the mix-up she keeps finding: .windsurfignore and .devinignore keep files away from the agent. They don't stop a .env file from being committed to git or uploaded with your site. That's like hiding the treats from the dog and leaving them on the porch.

The one thing to do

1. Make sure .env is in your .gitignore.
2. Pasted a real key into a chat? Rotate it.

The full pre-launch checklist is in the Windsurf guide. Then run a free scan of your own app at sniffpup.com.

Want one 2-minute check like this every morning? Sign up below.

Named after Ember, my black Pomeranian. Built by a software engineer and vibe-coding hobbyist to help you ship safely.