Cloud-based development environments have changed how software engineers write and review code. Instead of cloning a repository locally, installing dependencies, and configuring a local runtime, developers can spin up an entire workspace in the browser with a single keystroke. Tools like Codespaces and the web editor at github.dev make this process highly integrated.

However, this convenience introduces a concentrated security risk. To allow developers to commit code, open pull requests, and interact with private repositories, these browser-based environments must hold highly sensitive authentication tokens. If an attacker can access the environment's memory,