Tare da karuwar shaharar mataimakan AI, masu haɓaka software sun ga ƙaruwar adadin bayanai masu mahimmanci da ke shigowa cikin ma'ajiyar bayanai ta Git ta jama'a, galibi suna cikin bayanan da kayan aikin AI ke adanawa a cikin aikin aikin. Mataimakan AI Claude Code, Cursor, Continue, Aider, OpenAI Codex, Copilot, Sourcegraph Cody, da Amazon Q suna ƙirƙirar fayiloli da kundin adireshi na gida a cikin tushen aikin, wanda zai iya adanawa, a tsakanin sauran abubuwa, tarihin aiki da bayanan mahallin.
Fayilolin da mataimakan AI suka adana na iya ƙunsar maɓallan shiga API, igiyoyin haɗin DBMS, hanyoyin haɗi zuwa albarkatun ciki, da takaddun shaida don haɗawa zuwa yanayin girgije. Mataimakin AI yana samun waɗannan takaddun shaida yayin aiwatar da umarni, bayan aiki tare da saitunan gida, ko kuma an kama su a cikin mahallin da ya shafi aikin. Ga masu haɓakawa, tarin irin waɗannan bayanai a cikin tsarin fayil ɗin aikin ba a bayyane yake ba, don haka mutane da yawa suna mantawa da ƙara kundin adireshi da mataimakan AI suka ƙirƙira zuwa fayil ɗin .gitignore kuma, bayan buga canje-canje, suna motsa su zuwa ma'ajiyar Git ta jama'a.
An ƙirƙiri kayan aikin claudleak don gano irin waɗannan ɓuɓɓuga a cikin ma'ajiyar GitHub ta jama'a. Wani gwajin GitHub ya nuna cewa kusan kashi 2.4% na ma'ajiyar bayanai da ke ɗauke da ƙananan kundin adireshi waɗanda ke ɗauke da saitunan mataimakin AI sun ƙunshi maɓallai ko takaddun shaida masu inganci, waɗanda aka tabbatar da ingancinsu ta hanyar wani bincike daban. Marubucin kayan aikin ya fuskanci matsala lokacin da ya lura da fayil mai suna ".claude/settings.local.json" a cikin ma'ajiyar bayanai, wanda ke ɗauke da maɓallan shiga da kalmomin shiga da aka ratsa ta masu canjin yanayi.
Ana ba wa masu haɓaka software shawara su ƙara kundin adireshi na .claude/, .cursor/, .continue/, .copilot/, da .aider/ zuwa fayil ɗin .gitignore kuma su saita su don a yi watsi da su ta hanyar matatar duniya ta amfani da umarnin "git config --global core.excludesfile file_with_list".
source: budenet.ru
