{"id":1206,"date":"2026-09-27T09:56:16","date_gmt":"2026-09-27T01:56:16","guid":{"rendered":"https:\/\/junai.ai\/blog\/ai-coding-agent-secret-leak-2026\/"},"modified":"2026-09-27T09:56:16","modified_gmt":"2026-09-27T01:56:16","slug":"ai-coding-agent-secret-leak-2026","status":"publish","type":"post","link":"https:\/\/junai.ai\/blog\/ai-coding-agent-secret-leak-2026\/","title":{"rendered":"AI \ucf54\ub529 \uc5d0\uc774\uc804\ud2b8 \uc2dc\ud06c\ub9bf \ud0a4 \uc720\ucd9c \ubc29\uc9c0 \u2014 \uc0c8\ub294 \uae38 3\uacf3"},"content":{"rendered":"\n<!-- WordPress REST API \ubc1c\ud589\uc6a9 HTML (\uc790\ub3d9 \uc0dd\uc131) -->\n<!-- WP-FEATURED-MEDIA-ID: 1201 -->\n<div style=\"max-width:800px;margin:0 auto;\">\n<style>\n:root{--color-primary:#4f46e5;--color-accent:#6366f1;--color-bg:#fafbfc;--color-bg-card:#ffffff;--color-text:#1a202c;--color-text-muted:#64748b;--hero-start:#1e1b4b;--hero-end:#4338ca;--code-bg:#0f172a;--code-fg:#e2e8f0}\n*,*::before,*::after{box-sizing:border-box;margin:0;padding:0}\na{color:var(--color-primary);text-decoration:underline;text-underline-offset:3px}\nimg{max-width:100%;width:100%;height:auto;display:block;border-radius:12px}\narticle{max-width:760px;margin:0 auto;padding:56px 24px 72px;background:#fff}\n.meta-row{display:flex;gap:10px;flex-wrap:wrap;align-items:center;font-size:14px;color:var(--color-text-muted);margin-bottom:18px}\n.tag{display:inline-block;padding:3px 10px;background:#ede9fe;color:#6d28d9;border-radius:999px;font-weight:600;font-size:12px}\nh1{font-size:40px;font-weight:800;line-height:1.28;letter-spacing:-.025em;margin-bottom:18px;color:#0f172a}\n.lede{font-size:19px;color:#475569;margin-bottom:32px;line-height:1.7}\n.hero{margin:0 0 40px}\n.caption{font-size:13px;color:#94a3b8;text-align:center;margin-top:8px}\nh2{font-size:28px;font-weight:800;line-height:1.3;margin:54px 0 20px;color:#0f172a;letter-spacing:-.02em;padding-left:14px;border-left:4px solid var(--color-accent)}\nh3{font-size:20px;font-weight:700;margin:32px 0 12px;color:#1e293b}\np{margin-bottom:18px}\nul,ol{margin:0 0 20px 24px}\nli{margin-bottom:8px}\nli::marker{color:var(--color-accent)}\ncode{font-family:\"SF Mono\",Menlo,Consolas,monospace;font-size:.88em;background:#f1f5f9;color:#0f172a;padding:2px 6px;border-radius:4px;word-break:break-all}\npre{background:var(--code-bg);color:var(--code-fg);padding:18px 20px;border-radius:10px;overflow-x:auto;font-family:\"SF Mono\",Menlo,Consolas,monospace;font-size:14px;line-height:1.6;margin:20px 0 24px}\npre code{background:transparent;color:inherit;padding:0;word-break:normal}\n.callout{margin:26px 0;padding:18px 22px;background:linear-gradient(135deg,#eef2ff,#faf5ff);border-radius:12px;border:1px solid #e0e7ff}\n.callout strong{color:#4338ca}\n.warn{margin:26px 0;padding:18px 22px;background:#fffbeb;border-left:4px solid #f59e0b;border-radius:0 12px 12px 0}\n.src{font-size:13.5px;color:var(--color-text-muted)}\n.checklist{list-style:none;margin-left:0}\n.checklist li{padding:10px 14px 10px 40px;position:relative;border:1px solid #e2e8f0;border-radius:10px;margin-bottom:10px;background:#fcfcff}\n.checklist li::before{content:\"\u2610\";position:absolute;left:14px;top:9px;color:var(--color-primary);font-weight:800}\n.tablewrap{overflow-x:auto;-webkit-overflow-scrolling:touch;margin:22px 0}\ntable{width:100%;border-collapse:collapse;font-size:15px;background:var(--color-bg-card)}\nth,td{padding:11px 12px;text-align:left;border-bottom:1px solid #e2e8f0;vertical-align:top}\nth{background:#f1f5f9;font-weight:700;color:#0f172a}\ntd:first-child,th:first-child{font-weight:700}\n@media (max-width:560px){\n  .tablewrap table,.tablewrap thead,.tablewrap tbody,.tablewrap tr,.tablewrap th,.tablewrap td{display:block;width:auto}\n  .tablewrap thead{display:none}\n  .tablewrap tr{margin:0 0 14px;border:1px solid #e2e8f0;border-radius:10px;overflow:hidden}\n  .tablewrap td{border:none;border-bottom:1px solid #f1f5f9;padding:9px 14px}\n  .tablewrap td:first-child{background:#f1f5f9;font-weight:800;font-size:15.5px}\n  .tablewrap td:last-child{border-bottom:none}\n  .tablewrap td[data-label]::before{content:attr(data-label) \" \u2014 \";font-weight:700;color:var(--color-primary)}\n}\n.product-ad{margin:40px 0 0;padding:20px 22px;border:1px solid #e2e8f0;border-radius:12px;background:var(--color-bg-card,#f8fafc)}\n.product-ad-label{margin:0 0 8px;font-size:13px;font-weight:700;color:var(--color-text-muted,#64748b);letter-spacing:.3px}\n.product-ad-link{display:block;text-decoration:none;color:var(--color-primary,#1e40af)}\n.product-ad-link strong{display:block;font-size:16.5px;line-height:1.5;word-break:keep-all}\n.product-ad-link span{display:block;margin-top:4px;font-size:14px;color:var(--color-text-muted,#64748b);text-decoration:underline;word-break:break-all}\n.brand-cta{margin:48px 0 0;padding:30px 24px;text-align:center;border-radius:14px;color:#fff;background:linear-gradient(135deg,var(--hero-start,#0f172a) 0%,var(--hero-end,#1e40af) 100%)}\n.brand-cta-tagline{margin:0 0 10px;font-size:17px;font-weight:700;line-height:1.55;word-break:keep-all}\n.brand-cta-url{margin:0;font-size:16px;letter-spacing:.5px}\n.brand-cta-url a{color:#fff;text-decoration:underline;font-weight:800}\n@media (max-width:480px){\n  article{padding:36px 16px 56px}\n  h1{font-size:28px}\n  h2{font-size:22px;margin-top:44px}\n  h3{font-size:18px}\n.lede{font-size:17px}\n  pre{font-size:12.5px;padding:14px}\n  .brand-cta-tagline{font-size:15.5px}\n}\n<\/style>\n<article>\n\n<div class=\"meta-row\"><span class=\"tag\">\ub124\ud2b8\uc6cc\ud06c\u00b7\ubcf4\uc548<\/span><span>2026-09-27<\/span><span>\uc77d\ub294 \uc2dc\uac04 \uc57d 9\ubd84<\/span><\/div>\n\n<h1>AI \ucf54\ub529 \uc5d0\uc774\uc804\ud2b8 \uc2dc\ud06c\ub9bf \ud0a4 \uc720\ucd9c \ubc29\uc9c0 \u2014 \uc0c8\ub294 \uae38 3\uacf3<\/h1>\n\n<p class=\"lede\">3.2% \ub300 1.5%. GitGuardian\uc774 2025\ub144 \uacf5\uac1c GitHub \ucee4\ubc0b\uc744 \ud6d1\uc5b4\ubcf4\ub2c8, Claude Code\uac00 \uad00\uc5ec\ud55c \ucee4\ubc0b\uc5d0\uc11c \uc2dc\ud06c\ub9bf\uc774 \uc0c8\ub294 \ube44\uc728\uc774 \uc804\uccb4 \ud3c9\uade0\uc758 \ub450 \ubc30\ub97c \ub118\uc5c8\ub2e4. \uacf5\uaca9\uc790\uac00 \uc788\uc5b4\uc57c \ubc8c\uc5b4\uc9c0\ub294 \uc0ac\uace0\uac00 \uc544\ub2c8\ub2e4. \uc124\uc815 \ud30c\uc77c \ud558\ub098, \ub300\ud654 \ud55c \uc904\ub85c \ucda9\ubd84\ud558\ub2e4.<\/p>\n\n<figure class=\"hero\">\n<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/junai.ai\/blog\/wp-content\/uploads\/2026\/09\/hero-20.png\" alt=\"AI \ucf54\ub529 \uc5d0\uc774\uc804\ud2b8 \uc791\uc5c5 \ud654\uba74 \uc606\uc73c\ub85c \ud769\uc5b4\uc9c4 \ud0a4\uc640 \uc7a0\uae08 \uc544\uc774\ucf58 \uc77c\ub7ec\uc2a4\ud2b8\" width=\"1200\" height=\"675\">\n<figcaption class=\"caption\">\ud0a4\ub294 \ucf54\ub4dc\uac00 \uc544\ub2c8\ub77c \uc791\uc5c5 \uacf5\uac04 \uc804\uccb4\uc5d0\uc11c \uc0cc\ub2e4<\/figcaption>\n<\/figure>\n\n<p>\uae08\uc694\uc77c \uc624\ud6c4, \ud300\uc6d0\uc774 \uc0c8 MCP \uc11c\ubc84\ub97c \ubd99\uc778\ub2e4. \ud130\ubbf8\ub110\uc5d0 \ud55c \uc904 \uc785\ub825\ud558\uc790 \ud504\ub85c\uc81d\ud2b8 \ub8e8\ud2b8\uc5d0 <code>.mcp.json<\/code>\uc774 \uc0dd\uae30\uace0, \uadf8 \uc548\uc5d0 \ubc29\uae08 \ubd99\uc5ec \ub123\uc740 API \ud0a4\uac00 \ud3c9\ubb38\uc73c\ub85c \ubc15\ud78c\ub2e4. Claude Code \uacf5\uc2dd \ubb38\uc11c\ub294 \uc774 \ud30c\uc77c\uc744 <em>\ubc84\uc804 \uad00\ub9ac\uc5d0 \ucee4\ubc0b\ud574 \ud300\uacfc \uacf5\uc720\ud558\ub77c<\/em>\uace0 \uc548\ub0b4\ud55c\ub2e4. \ub2e4\uc74c \uc8fc \uc6d4\uc694\uc77c, \uadf8 \ud0a4\ub294 \uc6d0\uaca9 \uc800\uc7a5\uc18c\uc5d0 \uc62c\ub77c\uac00 \uc788\ub2e4.<\/p>\n\n<p>\uc774 \uae00\uc740 <strong>AI \ucf54\ub529 \uc5d0\uc774\uc804\ud2b8 \uc2dc\ud06c\ub9bf \ud0a4 \uc720\ucd9c \ubc29\uc9c0<\/strong>\uc5d0 \uc9d1\uc911\ud55c\ub2e4. 2026\ub144 6\uc6d4 Tenet Security\uac00 \uba85\uba85\ud55c &#8216;\uc5d0\uc774\uc804\ud2b8\uc7ac\ud0b9(agentjacking)&#8217;\uc740 Sentry MCP\uc5d0 \uac00\uc9dc \uc624\ub958\ub97c \uc2ec\uc5b4 \uc5d0\uc774\uc804\ud2b8\uac00 \ucf54\ub4dc\ub97c <em>\uc2e4\ud589<\/em>\ud558\uac8c \ub9cc\ub4dc\ub294 \uacf5\uaca9\uc774\ub2e4. \uadf8\ub7f0 \uc2e4\ud589 \uad8c\ud55c \ud0c8\ucde8\ub294 <a href=\"https:\/\/junai.ai\/blog\/ai-agent-prompt-injection-2026\">\ud504\ub86c\ud504\ud2b8 \uc778\uc81d\uc158 \uae00<\/a>\uc5d0\uc11c \ub530\ub85c \ub2e4\ub918\ub2e4. \uc5ec\uae30\uc11c \ub2e4\ub8f0 \uac74 \ub354 \uc870\uc6a9\ud55c \ucabd, \uc544\ubb34\ub3c4 \uacf5\uaca9\ud558\uc9c0 \uc54a\uc558\ub294\ub370 \ud0a4\uac00 \ubc16\uc73c\ub85c \uac78\uc5b4 \ub098\uac00\ub294 \uacbd\ub85c\ub2e4.<\/p>\n\n<h2>\uc22b\uc790\ub85c \ubcf4\uba74: \uc5d0\uc774\uc804\ud2b8\uac00 \ubd99\uc740 \uacf3\uc5d0\uc11c \ub354 \uc0cc\ub2e4<\/h2>\n\n<p>GitGuardian\uc740 \ub9e4\ub144 \uacf5\uac1c GitHub \uc804\uccb4\ub97c \uc2a4\uce94\ud574 <a href=\"https:\/\/blog.gitguardian.com\/the-state-of-secrets-sprawl-2026\/\" target=\"_blank\" rel=\"noopener\">State of Secrets Sprawl<\/a> \ubcf4\uace0\uc11c\ub97c \ub0b8\ub2e4. 2026\ub144 3\uc6d4\ud310(2025\ub144 \ub370\uc774\ud130)\uacfc \uc804\ub144\ud310 \uc218\uce58\ub97c \ud55c \ud45c\uc5d0 \ubaa8\uc558\ub2e4.<\/p>\n\n<div class=\"tablewrap\">\n<table>\n<thead><tr><th>\uc9c0\ud45c<\/th><th>\uc218\uce58<\/th><th>\ucd9c\ucc98<\/th><\/tr><\/thead>\n<tbody>\n<tr><td>\uacf5\uac1c GitHub \uc2e0\uaddc \ud558\ub4dc\ucf54\ub529 \uc2dc\ud06c\ub9bf<\/td><td data-label=\"\uc218\uce58\">2,865\ub9cc \uac74 (\uc804\ub144 \ub300\ube44 +34%)<\/td><td data-label=\"\ucd9c\ucc98\">GitGuardian 2026<\/td><\/tr>\n<tr><td>AI \uc11c\ube44\uc2a4 \ud0a4 \uc720\ucd9c<\/td><td data-label=\"\uc218\uce58\">127\ub9cc 5,105\uac74 (+81%)<\/td><td data-label=\"\ucd9c\ucc98\">GitGuardian 2026<\/td><\/tr>\n<tr><td>\uacf5\uac1c MCP \uc124\uc815\ud30c\uc77c \uc18d \uc2dc\ud06c\ub9bf<\/td><td data-label=\"\uc218\uce58\">24,008\uac74, \uadf8\uc911 \uc720\ud6a8 2,117\uac74<\/td><td data-label=\"\ucd9c\ucc98\">GitGuardian 2026<\/td><\/tr>\n<tr><td>Claude Code \ubcf4\uc870 \ucee4\ubc0b \uc720\ucd9c\ub960<\/td><td data-label=\"\uc218\uce58\">3.2% (\uc804\uccb4 \uae30\uc900\uc120 1.5%)<\/td><td data-label=\"\ucd9c\ucc98\">GitGuardian 2026<\/td><\/tr>\n<tr><td>Copilot \ud65c\uc131 \uc800\uc7a5\uc18c \uc720\ucd9c\ub960<\/td><td data-label=\"\uc218\uce58\">6.4% (\uc804\uccb4 4.6%, \uc57d 40% \ub192\uc74c)<\/td><td data-label=\"\ucd9c\ucc98\">GitGuardian 2025, \uc57d 2\ub9cc \uac1c \uc800\uc7a5\uc18c \ud45c\ubcf8<\/td><\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n\n<p>\ub208\uc5ec\uaca8\ubcfc \uc904\uc740 MCP\ub2e4. MCP\uac00 2024\ub144 11\uc6d4 \uacf5\uac1c\ub41c \ub4a4 \uccab \ud55c \ud574 \ub0a8\uc9d3 \ub9cc\uc5d0 2\ub9cc 4\ucc9c \uac74\uc774 \uacf5\uac1c \uc800\uc7a5\uc18c\uc5d0 \uc62c\ub77c\uc654\ub2e4. \ubcf4\uace0\uc11c\ub294 MCP \uc11c\ubc84 \ubb38\uc11c \uc0c1\ub2f9\uc218\uac00 \uc778\uc99d \uc815\ubcf4\ub97c \uc124\uc815 \ud30c\uc77c\uc5d0 \uc9c1\uc811 \ub123\uc73c\ub77c\uace0 \uc548\ub0b4\ud55c\ub2e4\ub294 \uc810\uc744 \uc6d0\uc778\uc73c\ub85c \uc9da\ub294\ub2e4. \ub3c4\uad6c\ub97c \ud0d3\ud558\uae30 \uc804\uc5d0 <em>\uc608\uc81c \ucf54\ub4dc<\/em>\uac00 \ubb38\uc81c\uc600\ub358 \uc148.<\/p>\n\n<h2>\ud0a4\uac00 \uc0c8\ub294 \uae38 \uc138 \uacf3<\/h2>\n\n<h3>\u2460 &#8220;\uc77c\ub2e8 \ub3cc\uc544\uac00\uac8c&#8221; \u2014 \ud558\ub4dc\ucf54\ub529<\/h3>\n<p>\uc5d0\uc774\uc804\ud2b8\uc5d0\uac8c &#8220;\uacb0\uc81c API \ubd99\uc5ec\uc918&#8221;\ub77c\uace0 \ud558\uba74, \ub3d9\uc791\ud558\ub294 \ucf54\ub4dc\ub97c \uac00\uc7a5 \ube68\ub9ac \ub9cc\ub4dc\ub294 \ubc29\ubc95\uc740 \ud0a4\ub97c \uc18c\uc2a4\uc5d0 \ubc14\ub85c \uc4f0\ub294 \uac83\uc774\ub2e4. \uc0ac\ub78c\uc774 \ub9ac\ubdf0 \uc5c6\uc774 \uc218\ub77d\ud558\uba74 \uadf8\ub300\ub85c \ucee4\ubc0b\ub41c\ub2e4. Copilot \ud65c\uc131 \uc800\uc7a5\uc18c\uc758 6.4%\ub77c\ub294 \uc218\uce58\ub3c4 \uc774 \uacbd\ub85c\uc640 \ubb34\uad00\ud574 \ubcf4\uc774\uc9c0 \uc54a\ub294\ub2e4. AI \uc11c\ube44\uc2a4 \ud0a4 \uc720\ucd9c\uc774 81% \uae09\uc99d\ud588\ub2e4\ub294 \ub300\ubaa9\ub3c4 \uac19\uc740 \ub9e5\ub77d. \ubcf4\uace0\uc11c\ub294 DeepSeek API \ud0a4\ub9cc 11\ub9cc 3\ucc9c \uac74\uc774 \uc0dc\ub2e4\uace0 \uc801\uc5c8\ub2e4.<\/p>\n\n<h3>\u2461 \uacf5\uc720\ud558\ub77c\uace0 \ub9cc\ub4e0 \ud30c\uc77c \u2014 MCP \uc124\uc815<\/h3>\n<p>\uacbd\ub85c\ub97c \uc678\uc6cc \ub450\uc790. Claude Code\ub294 \ud504\ub85c\uc81d\ud2b8\uc6a9 <code>.mcp.json<\/code>\uacfc \uc0ac\uc6a9\uc790\uc6a9 <code>~\/.claude.json<\/code>, Cursor\ub294 <code>.cursor\/mcp.json<\/code>\uacfc <code>~\/.cursor\/mcp.json<\/code>\uc744 \uc4f4\ub2e4. \ud504\ub85c\uc81d\ud2b8 \ucabd \ud30c\uc77c\uc740 \ud300 \uacf5\uc720\uac00 \uc124\uacc4 \ubaa9\uc801\uc774\ub77c <code>.gitignore<\/code>\ub85c \uc228\uae30\uba74 \ud300\uc6d0\ub9c8\ub2e4 \uc124\uc815\uc744 \ub530\ub85c \ub9de\ucdb0\uc57c \ud55c\ub2e4. \uadf8\ub7ec\ub2c8 \ud30c\uc77c\uc740 \ucee4\ubc0b\ud558\uace0, \ud0a4\ub294 \ubcc0\uc218\ub85c \ube7c\ub294 \uac8c \uc815\ub2f5\uc774\ub2e4.<\/p>\n\n<pre><code>\/\/ .mcp.json (Claude Code) \u2014 \ud0a4 \uc790\ub9ac\uc5d0 \ubcc0\uc218\ub9cc\n{\n  \"mcpServers\": {\n    \"billing\": {\n      \"type\": \"http\",\n      \"url\": \"https:\/\/api.example.com\/mcp\",\n      \"headers\": { \"Authorization\": \"Bearer ${BILLING_API_KEY}\" }\n    }\n  }\n}\n\/\/ Cursor .cursor\/mcp.json \uc740 \"${env:BILLING_API_KEY}\" \ubb38\ubc95,\n\/\/ stdio \uc11c\ubc84\ub77c\uba74 \"envFile\" \ud544\ub4dc\ub85c \ubcc4\ub3c4 \ud30c\uc77c \uc9c0\uc815 \uac00\ub2a5<\/code><\/pre>\n\n<h3>\u2462 \ucee8\ud14d\uc2a4\ud2b8\ub85c \ube68\ub824 \ub4e4\uc5b4\uac00\ub294 .env<\/h3>\n<p>\uc138 \ubc88\uc9f8\ub294 \ucee4\ubc0b\uc870\ucc28 \ud544\uc694 \uc5c6\ub2e4. 2026\ub144 1\uc6d4 The Register\ub294 Claude Code v2.1.12\uc5d0\uc11c <code>.claudeignore<\/code>\uc5d0 <code>.env<\/code>\ub97c \uc801\uc5b4 \ub450\uc5c8\ub294\ub370\ub3c4 \uc5d0\uc774\uc804\ud2b8\uac00 \ud30c\uc77c\uc744 \uc77d\uc5b4 \ube44\ubc00\uac12\uc744 \ucd9c\ub825\ud558\ub294 \ud604\uc0c1\uc744 \uc7ac\ud604\ud588\ub2e4. \uc77d\ud78c \uac12\uc740 \ubaa8\ub378 \ucee8\ud14d\uc2a4\ud2b8, \uc989 \uc678\ubd80 \uc11c\ubc84\ub85c \uac00\ub294 \uc694\uccad\uc5d0 \uc2e4\ub9b0\ub2e4. GitGuardian\uc740 2026\ub144 9\uc6d4 \ubd84\uc11d\uc5d0\uc11c \uc178 \ud788\uc2a4\ud1a0\ub9ac, \uc5d0\uc774\uc804\ud2b8 \ub85c\uadf8(<code>~\/.copilot\/logs\/<\/code> \ub4f1), \uce90\uc2dc\uae4c\uc9c0 \uc800\uc7a5\uc18c \uc2a4\uce90\ub108\uac00 \ubcf4\uc9c0 \ubabb\ud558\ub294 \ud754\uc801\uc73c\ub85c \uaf3d\uc558\ub2e4.<\/p>\n\n<h2>&#8220;ignore \ud30c\uc77c\uc774\uba74 \ub41c\ub2e4&#8221;\ub294 \ucc29\uac01<\/h2>\n\n<p>\uac00\uc7a5 \ud754\ud55c \ucc98\ubc29\uc740 <code>.cursorignore<\/code>\ub098 \uad8c\ud55c \uac70\ubd80 \uaddc\uce59\uc774\ub2e4. \ud544\uc694\ud558\ub2e4. \uadf8\ub7f0\ub370 \uacf5\uc2dd \ubb38\uc11c\ub97c \ub05d\uae4c\uc9c0 \uc77d\uc73c\uba74 \ubca4\ub354 \uc2a4\uc2a4\ub85c \ud55c\uacc4\ub97c \uc801\uc5b4 \ub450\uc5c8\ub2e4.<\/p>\n\n<div class=\"warn\">\n<p><strong>Cursor \ubb38\uc11c<\/strong>: Agent\uac00 \uc4f0\ub294 \ud130\ubbf8\ub110\uacfc MCP \uc11c\ubc84 \ub3c4\uad6c\ub294 <code>.cursorignore<\/code>\ub85c \ub9c9\uc744 \uc218 \uc5c6\uace0, LLM\uc758 \uc608\uce21 \ubd88\uac00\ub2a5\uc131 \ub54c\ubb38\uc5d0 \uc644\uc804\ud55c \ubcf4\ud638\ub294 \ubcf4\uc7a5\ub418\uc9c0 \uc54a\ub294\ub2e4.<\/p>\n<p style=\"margin-bottom:0\"><strong>Claude Code \ubb38\uc11c<\/strong>: <code>Read<\/code> \uac70\ubd80 \uaddc\uce59\uc740 \ub0b4\uc7a5 \ud30c\uc77c \ub3c4\uad6c\uc640 <code>cat<\/code>\u00b7<code>head<\/code> \uac19\uc740 \uc778\uc2dd \uac00\ub2a5\ud55c \uba85\ub839\uc5d0 \uc801\uc6a9\ub41c\ub2e4. \ud30c\uc77c\uba85\uc744 \uc9c0\uc815\ud558\uc9c0 \uc54a\ub294 <code>grep -r<\/code>, \uc2a4\uc2a4\ub85c \ud30c\uc77c\uc744 \uc5ec\ub294 Python\u00b7Node \uc2a4\ud06c\ub9bd\ud2b8\uc5d0\ub294 \uc801\uc6a9\ub418\uc9c0 \uc54a\ub294\ub2e4. \ubaa8\ub4e0 \ud504\ub85c\uc138\uc2a4\ub97c \ub9c9\uc73c\ub824\uba74 \uc0cc\ub4dc\ubc15\uc2a4\ub97c \ucf1c\ub77c\uace0 \uc548\ub0b4\ud55c\ub2e4.<\/p>\n<\/div>\n\n<p>\uc5ec\uae30\uc11c \ub450 \uc9c4\uc601\uc774 \uac08\ub9b0\ub2e4. &#8220;\uaddc\uce59\uc744 \ucd18\ucd18\ud788 \uc9dc\uba74 \ub41c\ub2e4&#8221;\ub294 \ucabd\uacfc &#8220;\ub514\uc2a4\ud06c\uc5d0 \ud0a4\uac00 \uc788\ub294 \ud55c \uc5b8\uc820\uac00 \uc77d\ud78c\ub2e4&#8221;\ub294 \ucabd. \ub098\ub294 \ud6c4\uc790\uc5d0 \uac00\uae5d\ub2e4. \uac70\ubd80 \uaddc\uce59\uc740 \uc0ac\uace0 \ud655\ub960\uc744 \ub0ae\ucd94\ub294 \uc548\uc804\ubca8\ud2b8\ub2e4. \uc0ac\uace0 \uc790\uccb4\ub97c \uc5c6\uc560\ub824\uba74 <strong>\uc77d\uc744 \ud30c\uc77c\uc774 \uc560\ucd08\uc5d0 \uc5c6\uc5b4\uc57c<\/strong> \ud55c\ub2e4. \uc2dc\ud06c\ub9bf \ub9e4\ub2c8\uc800\uc5d0\uc11c \uc2e4\ud589 \uc2dc\uc810\uc5d0\ub9cc \uc8fc\uc785\ud558\uba74 \uc5d0\uc774\uc804\ud2b8\uac00 <code>.env<\/code>\ub97c \uc5f4\uc5b4 \ubd10\uc57c \ube48 \uaecd\ub370\uae30\ub2e4.<\/p>\n\n<p>\ubb3c\ub860 \ube44\uc6a9\uc774 \uc788\ub2e4. \ub85c\uceec \uac1c\ubc1c\ub9c8\ub2e4 \ub9e4\ub2c8\uc800 \uc778\uc99d\uc744 \uac70\uccd0\uc57c \ud558\uace0, 1\uc778 \ud504\ub85c\uc81d\ud2b8\uc5d4 \uacfc\ud560 \uc218 \uc788\ub2e4. \uadf8\ub798\uc11c \uc544\ub798 \uccb4\ud06c\ub9ac\uc2a4\ud2b8\ub294 \uce35\uc744 \ub098\ub234\ub2e4.<\/p>\n\n<h2>\uac1c\ubc1c\ud300 \ubc29\uc9c0 \uccb4\ud06c\ub9ac\uc2a4\ud2b8<\/h2>\n\n<p>\uc624\ub298 \ubc14\ub85c \ud560 \uac83\ubd80\ud130. \uba3c\uc800 Claude Code\ub97c \uc4f0\ub294 \ud300\uc774\ub77c\uba74 \uacf5\uc720 \uc124\uc815\uc5d0 \uac70\ubd80 \uaddc\uce59\uc744 \ub123\ub294\ub2e4. \uacf5\uc2dd \ubb38\uc11c \uc608\uc2dc \uadf8\ub300\ub85c\ub2e4.<\/p>\n\n<pre><code>\/\/ .claude\/settings.json\n{\n  \"permissions\": {\n    \"deny\": [\"Read(.\/.env)\", \"Read(.\/.env.*)\", \"Read(.\/secrets\/**)\"]\n  }\n}<\/code><\/pre>\n\n<ul class=\"checklist\">\n<li><strong>MCP \uc124\uc815\uc740 \ubcc0\uc218\ub9cc<\/strong> \u2014 <code>.mcp.json<\/code>\u00b7<code>.cursor\/mcp.json<\/code>\uc5d0 \ud3c9\ubb38 \ud0a4\uac00 \uc788\uc73c\uba74 <code>${VAR}<\/code> \ud615\ud0dc\ub85c \uad50\uccb4\ud558\uace0, \uc774\ubbf8 \ucee4\ubc0b\ub41c \ud0a4\ub294 \uc989\uc2dc \ud3d0\uae30\u00b7\uc7ac\ubc1c\uae09.<\/li>\n<li><strong>pre-commit \uc2a4\uce94<\/strong> \u2014 gitleaks\ub098 ggshield \uac19\uc740 \uc2dc\ud06c\ub9bf \uc2a4\uce90\ub108\ub97c \ucee4\ubc0b \ud6c5\uacfc CI \uc591\ucabd\uc5d0 \uac74\ub2e4. \uc5d0\uc774\uc804\ud2b8\uac00 \ub9cc\ub4e0 \ucee4\ubc0b\ub3c4 \uac19\uc740 \ubb38\uc744 \uc9c0\ub098\uac8c.<\/li>\n<li><strong>ignore\uc640 deny\ub294 \ub458 \ub2e4<\/strong> \u2014 <code>.cursorignore<\/code>, Claude Code <code>permissions.deny<\/code>\ub97c \ud568\uaed8 \uc4f0\ub418 &#8220;\ubcf4\uc7a5 \uc544\ub2d8&#8221;\uc744 \uc804\uc81c\ub85c.<\/li>\n<li><strong>\uc0cc\ub4dc\ubc15\uc2a4 \ucf1c\uae30<\/strong> \u2014 \uc178 \uba85\ub839\uacfc \ud558\uc704 \ud504\ub85c\uc138\uc2a4\uc758 \ud30c\uc77c \uc811\uadfc\uc744 OS \uc218\uc900\uc5d0\uc11c \uc81c\ud55c.<\/li>\n<li><strong>\ud0a4 \uc218\uba85 \uc904\uc774\uae30<\/strong> \u2014 \uac1c\ubc1c\uc6a9 \ud0a4\ub294 \uad8c\ud55c \ucd5c\uc18c\u00b7\uc9e7\uc740 \ub9cc\ub8cc. \uc0c8\ub3c4 \ud53c\ud574 \ubc18\uacbd\uc774 \uc791\ub2e4.<\/li>\n<li><strong>\ub85c\uceec \ud754\uc801 \uc810\uac80<\/strong> \u2014 \uc178 \ud788\uc2a4\ud1a0\ub9ac, \uc5d0\uc774\uc804\ud2b8 \ub85c\uadf8 \ud3f4\ub354\uc5d0 \ud0a4\uac00 \ucc0d\ud614\ub294\uc9c0 \ubd84\uae30\ub9c8\ub2e4 \ud655\uc778.<\/li>\n<\/ul>\n\n<div class=\"callout\">\n<p style=\"margin-bottom:0\"><strong>\uc6b0\uc120\uc21c\uc704 \ud55c \uc904 \uc694\uc57d<\/strong> \u2014 1\uc778\u00b7\uc0ac\uc774\ub4dc \ud504\ub85c\uc81d\ud2b8\ub294 \ubcc0\uc218\ud654 + pre-commit \uc2a4\uce94\uae4c\uc9c0. \ud300\u00b7\uace0\uac1d \ub370\uc774\ud130\uac00 \uac78\ub9b0 \uc800\uc7a5\uc18c\ub294 \uc0cc\ub4dc\ubc15\uc2a4\uc640 \uc2dc\ud06c\ub9bf \ub9e4\ub2c8\uc800\uae4c\uc9c0 \uc62c\ub9b0\ub2e4.<\/p>\n<\/div>\n\n<p>\uc22b\uc790\uac00 \ub9d0\ud574 \uc8fc\ub294 \uac74 \uc5d0\uc774\uc804\ud2b8\uac00 \ubd80\uc8fc\uc758\ud558\ub2e4\ub294 \uc0ac\uc2e4\uc774 \uc544\ub2c8\ub2e4. \ud0a4\ub97c \ub450\ub294 \uc790\ub9ac\uac00 \ucf54\ub4dc\uc5d0\uc11c \uc791\uc5c5 \uacf5\uac04 \uc804\uccb4\ub85c \ub113\uc5b4\uc84c\ub2e4\ub294 \uac83\uc774\ub2e4. \ub2f9\uc2e0\uc758 \uc800\uc7a5\uc18c\uc5d0\uc11c <code>mcp.json<\/code>\uc744 \uac80\uc0c9\ud574 \ubcf4\uba74 \uc5b4\ub5a4 \uc904\uc774 \ub098\uc62c\uae4c. \ud55c \ubc88 \ud655\uc778\ud574 \ubcf4\uba74 \ub2f5\uc774 \ub098\uc628\ub2e4.<\/p>\n\n<p class=\"src\">\ucc38\uace0: GitGuardian State of Secrets Sprawl 2026\u00b72025, GitGuardian \ube14\ub85c\uadf8(2026-09-25), The Register(2026-01-28), Cursor\u00b7Claude Code \uacf5\uc2dd \ubb38\uc11c.<\/p>\n\n<aside class=\"product-ad\">\n  <p class=\"product-ad-label\">\ud568\uaed8 \ubcf4\uba74 \uc88b\uc740 \uc11c\ube44\uc2a4<\/p>\n  <a class=\"product-ad-link\" href=\"https:\/\/ayvpn.junai.ai?utm_source=wordpress&#038;utm_medium=content&#038;utm_campaign=infra&#038;utm_content=361\" target=\"_blank\" rel=\"noopener\">\n    <strong>\uadf8 \ub098\ub77c\uc5d0 \ucd5c\uc801\ud654\ub41c \ub300\ud55c\ubbfc\uad6d VPN \u2014 AYVPN<\/strong>\n    <span>https:\/\/ayvpn.junai.ai<\/span>\n  <\/a>\n<\/aside>\n\n<footer class=\"brand-cta\">\n  <p class=\"brand-cta-tagline\">\uc544\uc774\ub514\uc5b4\ub97c \ud604\uc2e4\ub85c, \uc6f9\ubd80\ud130 AI \uc790\ub3d9\ud654\uae4c\uc9c0 \uc62c\uc778\uc6d0 \uac1c\ubc1c \ud30c\ud2b8\ub108<\/p>\n  <p class=\"brand-cta-url\"><a href=\"https:\/\/junai.ai?utm_source=wordpress&#038;utm_medium=content&#038;utm_campaign=infra&#038;utm_content=361\" target=\"_blank\" rel=\"noopener\">HTTPS:\/\/JUNAI.AI<\/a><\/p>\n<\/footer>\n\n<\/article>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Cursor\u00b7Claude Code \uc4f0\ub2e4 API \ud0a4\uac00 \uc0c8\ub294 \uc138 \uacbd\ub85c(\ud558\ub4dc\ucf54\ub529\u00b7MCP \uc124\uc815\ud30c\uc77c\u00b7.env \ucee8\ud14d\uc2a4\ud2b8)\uc640 \uac1c\ubc1c\ud300\uc6a9 \ubc29\uc9c0 \uccb4\ud06c\ub9ac\uc2a4\ud2b8\ub97c \uc815\ub9ac\ud588\ub2e4.<\/p>\n","protected":false},"author":1,"featured_media":1201,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8],"tags":[],"class_list":["post-1206","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-infra"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/junai.ai\/blog\/wp-json\/wp\/v2\/posts\/1206","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/junai.ai\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/junai.ai\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/junai.ai\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/junai.ai\/blog\/wp-json\/wp\/v2\/comments?post=1206"}],"version-history":[{"count":0,"href":"https:\/\/junai.ai\/blog\/wp-json\/wp\/v2\/posts\/1206\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/junai.ai\/blog\/wp-json\/wp\/v2\/media\/1201"}],"wp:attachment":[{"href":"https:\/\/junai.ai\/blog\/wp-json\/wp\/v2\/media?parent=1206"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/junai.ai\/blog\/wp-json\/wp\/v2\/categories?post=1206"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/junai.ai\/blog\/wp-json\/wp\/v2\/tags?post=1206"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}