> git clone https://username:password@github.com/.. https://username:password@github.com/... will end up in git reflog So if your deploy process is an anonymou

> git clone https://username:password@github.com/.. https://username:password@github.com/... will end up in git reflog So if your deploy process is an anonymous git checkout of Drupal, there's no credential leaking to worry about. > no guarantee a future feature of Git that you've never heard of doesn't make the problem worse Okay.