currently it says:
Sensitive Information: Never commit sensitive data or API keys to the repository.
Would you do this by adding them to the gitignore from the very start?
Currently we recommend then to work in gitlab and possibly commit their sensitive data, then create a fresh repo without any history of senstive data to then push to github and then to zenodo for publishing.
could something like this be added if you think that is correct?
Sensitive Information: Never commit sensitive data or API keys to the repository. When creating a repository to be pushed on GitHub, and working with sensitive data, add the data files to the .gitignore from the start
?