3 ms·
Daily reminder: - Once it is on the internet - it is always there so Rotate the key/secrets FIRST. - Never think secrets are gone because of you have recommit
by v3ss0n 1y ago
Daily reminder:
- Once it is on the internet - it is always there so Rotate the key/secrets FIRST.
- Never think secrets are gone because of you have recommited .
- Deleting a commit is not enough , use BFG Cleaner - https://rtyley.github.io/bfg-repo-cleaner/ https://rtyley.github.io/bfg-repo-cleaner/ , and force commit to change history.
Edit- Forget to add most important thing - rotating the key.
- hnlmorg 1y agoThe problem here is that GitHub keeps the ref logs even for commits that no longer exist. I don’t see how BFG helps here
- v3ss0n 1y agoit rewrites the history. Isn't that really enough? You can remove all the keys from the git history. and I agree , i forget the point about rotating the key which i do always in first .
- Timwi 1y agoIt might remove it from your local repo, but not from GitHub, that's the point.
- hnlmorg 1y agoNo it’s not enough. Read the article and it will explain why. Also, if you’re going to rotate your secrets (which you absolutely should do regardless) then everything else is pointless because it’s now just an invalid credential.
- weird-eye-issue 1y agoI think you mean "rotate the keys"
- GrandaPanda 1y agoHad it correct in the first two points, then contradicted yourself with the last. Rotate your secrets.
- v3ss0n 1y agoYeah good point. Rotating secrets is a point i forget to add.
- deleted 1y ago[deleted]