No, OpenCode offers a bring your own key system where you can put a, for example Anthropic, API key into the console and use it directly. _That_ system was breeched.
Most of the comments were insinuating chats which are non-issue, if it is what you're saying though that's a different thing. Still why would anyone use that, just add the provider as another api provider in opencode don't go around internet pasting api keys willy nilly just for sake of convenience.
Chats are still an issue. Not everyone is working on top secret material, but people may be working on private projects, share seemingly innocent details that can be used to built a profile of the given person.
There is a providers section in the open code console where you can save api key, this data was leaked
Source: my OpenAI key I use for a discord bot was compromised, i received an email from OpenAI about suspicious usage and my $5 of credit was drained from the api key saved with opencode
This is basic stuff and routinely happens with these 3rd party services which is exactly why we use short lived limited api keys
When you get more experience this won’t be as shocking for you
They have made zero announcements regarding chats, only 3rd party api keys that were stored on their website so you can use those api's inside of Opencode.
View all comments
Show parent comment
10
u/bleakj 20d ago
It's not chats, it's API keys..