3 ms·
It can be slightly more complex than that if you use a package manager to publish your work. I once accidentally leaked a password due to having both a .gitigno
by shimo5037 10y ago
It can be slightly more complex than that if you use a package manager to publish your work. I once accidentally leaked a password due to having both a .gitignore and an .npmignore, and forgetting to include my .env file in the latter. Fortunately, I realized what had happened almost immediately and was able to change the password. Now I tend to `tar tf` everything before publishing.
- gkya 10y agoI believe that it's better to not have that kind of sensitive files be dotfiles.
- matt_kantor 10y agoBecause of issues like this I tend to set up my deploy scripts to first `git clone` into a temporary directory, then do the rest of the work from there.