You don't use .gitignore? All our projects use dotenv for local credentials with a .gitignore that covers build, log, and any *.env file. Sounds like you need

You don't use .gitignore? All our projects use dotenv for local credentials with a .gitignore that covers build, log, and any *.env file. Sounds like you need better tooling, tbh.