Skip to main content
Version: 0.56.6

OC-AGM-002: Secrets in AGENTS.md - OpenCode

Summary​

  • Rule ID: OC-AGM-002
  • Severity: HIGH
  • Category: OpenCode
  • Normative Level: MUST
  • Auto-Fix: No
  • Verified On: 2026-04-23

Applicability​

  • Tool: opencode
  • Version Range: unspecified
  • Spec Revision: unspecified

Evidence Sources​

Test Coverage Metadata​

  • Unit tests: true
  • Fixture tests: true
  • E2E tests: false

Examples​

The following examples demonstrate what triggers this rule and how to fix it.

Invalid​

# AGENTS

API_KEY=sk-123456

Valid​

# AGENTS

Use environment variables.