exe.dev integrations let you store secrets with exe.dev’s control plane so your VMs (and the agents on those VMs) can access services without seeing the secrets themselves. The next step is to avoid having the secret to begin with. When exe.dev and the other service both support Workload Identity Federation (WIF), you can do just that.
If you’ve been using API keys for exe.dev’s LLM gateway, there’s now another way. Both Anthropic and OpenAI support Workload Identity Federation. Two fewer keys to lose! Pro tip: agents are excellent at configuring WIF on your behalf.
source & further reading
blog.exe.dev — original article
Automatic Compaction: How Shelley Keeps Going and Going Without Losing the Plot
What's Going on With the Air Quality in San Francisco?
Tales from the Software Factory: The Cron and the VM