Skip to content

security: add comprehensive secret/credential patterns to .gitignore#9

Merged
nickotmazgin merged 1 commit intomainfrom
security-gitignore-update
Nov 5, 2025
Merged

security: add comprehensive secret/credential patterns to .gitignore#9
nickotmazgin merged 1 commit intomainfrom
security-gitignore-update

Conversation

@nickotmazgin
Copy link
Copy Markdown
Owner

@nickotmazgin nickotmazgin commented Nov 5, 2025

  • Block environment files: .env, .env, .env.
  • Block certificates: *.pem, *.key, *.crt, *.cer, *.der
  • Block encrypted files: *.gpg, *.p12, *.pfx
  • Block SSH keys: *_rsa, _dsa, _ecdsa, id_ed25519, id_rsa, id_dsa
  • Block credentials: credentials*, secrets*, .npmrc, .pypirc

Description

Brief description of changes

Type of Change

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • Documentation update
  • Code refactoring

Testing

  • Tested on GNOME Shell 44
  • Tested on GNOME Shell 45
  • Tested on GNOME Shell 46
  • Tested on GNOME Shell 47
  • No breaking changes

Screenshots (if applicable)

Add screenshots here.

Checklist

  • My code follows the project's style guidelines
  • I have self-reviewed my code
  • I have commented my code where necessary
  • I have updated the documentation accordingly
  • My changes generate no new warnings
  • I have added tests if applicable
  • All new and existing tests pass

Additional Notes

Any additional information that reviewers should know.


Note

Expand .gitignore to exclude environment files, certificates/keys, encrypted files, SSH keys, and common credentials configs.

  • .gitignore:
    • Add ignore patterns for secrets/credentials:
      • Environment files: *.env, .env*, *.env.*
      • Certificates/keys: *.pem, *.key, *.crt, *.cer, *.der
      • Encrypted/PKCS files: *.gpg, *.p12, *.pfx
      • SSH keys: *_rsa, *_dsa, *_ecdsa, *id_ed25519*, id_rsa*, id_dsa*, id_ecdsa*
      • Credentials/config: credentials*, secrets*, .npmrc, .pypirc

Written by Cursor Bugbot for commit e0db05d. This will update automatically on new commits. Configure here.

- Block environment files: *.env, .env*, *.env.*
- Block certificates: *.pem, *.key, *.crt, *.cer, *.der
- Block encrypted files: *.gpg, *.p12, *.pfx
- Block SSH keys: *_rsa, *_dsa, *_ecdsa, *id_ed25519*, id_rsa*, id_dsa*
- Block credentials: credentials*, secrets*, .npmrc, .pypirc
@nickotmazgin nickotmazgin merged commit b4585e4 into main Nov 5, 2025
2 checks passed
@nickotmazgin nickotmazgin deleted the security-gitignore-update branch November 5, 2025 21:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant