3 ms·
For those using GitHub, there should be some kind of "scanner" that sniff certain keywords and doesn't let the code go public
by pknerd 3y ago
For those using GitHub, there should be some kind of "scanner" that sniff certain keywords and doesn't let the code go public
- patmorgan23 3y agoBut also put all your credentials in a .gitignored config file or use environment variables. No hard coded creds/API keys
- nlawalker 3y agoCan't tell if this is /s or not, so linking this in good faith: https://docs.github.com/en/code-security/secret-scanning https://docs.github.com/en/code-security/secret-scanning Major oversight that there's not one single mention of this specific feature in the article.