If you don't accidentally expose your credentials in .git/config to push changes to the repo (e.g. GitHub username/password for http auth) there is no risk. St

If you don't accidentally expose your credentials in .git/config to push changes to the repo (e.g. GitHub username/password for http auth) there is no risk. Still - having a real deployment process is much better. It could be as easy as extracting the contents of a tarball generated by git archive.