4 ms·
Agreed ... use a pre-commit hook to scan your repository for high-entropy strings before they are forever enshrined in your history (https://github.com/dxa4481/
by smoyer 9y ago
Agreed ... use a pre-commit hook to scan your repository for high-entropy strings before they are forever enshrined in your history (https://github.com/dxa4481/truffleHog https://github.com/dxa4481/truffleHog).
- tachyoff 9y agoTo be fair, though, history can be rewritten, albeit sometimes with some difficulty.
- ameliaquining 9y agoIf a secret has ever been in Git then you probably can't know where it's been copied to and should treat it as likely to have been leaked.
- tachyoff 9y agoOh, absolutely. That’s what’s important. But if youre embarrassed or just want the commits gone, there are ways to pretend it never happened.
- djglass 9y agoGreat idea! Thanks for linking to that tool.