3 ms·
> You just have to remember it before pushing anything on github. Do you read commit history looking for, say, relocated secrets? Do you go through the pain of
by vthriller 7y ago
> You just have to remember it before pushing anything on github.
Do you read commit history looking for, say, relocated secrets? Do you go through the pain of rewriting said history regardless of whether you avoid merges with your current workflow or not? For me, that's too many risky and involving things to do. This advice will only work if you're only going to export squashed commits from private repo to the public one once in a while.
- ilikehurdles 7y agoThe best thing to do is assume the secret is fully compromised the second it hits GitHub, and consider it worthless to protect with these measures. Get a new secret immediately and trash the old one.