4 ms·

If anyone wants to keep secrets in a repo, git-crypt is your friend: https://www.agwa.name/projects/git-crypt/ https://www.agwa.name/projects/git-crypt/

• iyanuashiri 8y ago
  Thanks. Checking it out
  • solox3 8y ago
    Old commits are still showing the credentials. Recommend following this guide to erase your .env from all commits. https://help.github.com/articles/removing-sensitive-data-from-a-repository/ https://help.github.com/articles/removing-sensitive-data-fro...
    • krageon 8y ago
      It's too late now in any case. Removing them is cute, but in terms of security credentials can only be rotated now. Removing them doesn't help when someone has already pulled that history previously.
      • bausshf 8y ago
        You should still do it for future references
• Selfcommit 8y ago
  BlackBox is also great for this purpose: https://github.com/StackExchange/blackbox https://github.com/StackExchange/blackbox
• rasjani 8y ago
  Albeit I havent made any effort to try to fix it - its a bit hard to compile on Windows.