This shifts secrets sprawl from a hygiene issue into an identity problem. As AI agents generate and embed credentials faster than teams can track them, traditional detection and rotation practices struggle to keep pace.

Key points from the report:

• AI-assisted commits leak secrets at approximately 2x the rate of human-written commits
• Most of the fastest-growing categories of leaked credentials are connected to AI
• AI coding agents are changing how quickly developers build and ship software — and how quickly credentials can become exposed

For security teams, the takeaway is that secret management needs to be treated as part of identity and access strategy, not a separate cleanup task. Detection alone will not scale if agents keep producing credentials faster than they can be reviewed and rotated.

Source: The Hacker News

Has your organization adjusted its secret scanning or rotation policies since adopting AI coding assistants?