Coding agent can read your .env file(bitwarden.com)

https://bitwarden.com/blog/secure-ai-agent-access-with-secrets-manager/