Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

added .env to .gitignore #76

Closed
wants to merge 1 commit into from

Conversation

Dhruv-pahuja
Copy link

@Dhruv-pahuja Dhruv-pahuja commented Nov 21, 2024

fixes #71

what i have done:
Added .env in .gitignore file

this PR will make the env file get removed from repo online and in future it will not get pushed back to repo if any changes detected by git

additonal note:
To fully address the issue, the .env file should be removed from the Git history using tools like BFG Repo-Cleaner or git filter-branch. Additionally, any sensitive keys or credentials should be rotated to ensure they are secure.
AND
repo owner should replace the old variable values used in current env to new values

fixes AOSSIE-Org#71 

what i have done:
Added .env in .gitignore file

this PR will make the env file get removed from repo online and in future it will not get pushed back to repo if any changes detected by git

additonal note:
To fully address the issue, the .env file should be removed from the Git history using tools like BFG Repo-Cleaner or git filter-branch. Additionally, any sensitive keys or credentials should be rotated to ensure they are secure.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

BUG:Security vulnerability , .env file committed to repo
1 participant