News for hackers. Stuff that matters.

A comment on Git ignores .gitignore with .gitignore in .gitignore. Parent comment

Re:Git ignores .gitignore with .gitignore in .gitignore by AndrewThrowaway on Wednesday May 18, 2022 @04:58AM (#31420590)
The only problem I can see it "leaking" some information?

"I see this guy has 'passwords/'" on his local machine, let's somehow sneakily merge new .gitignore to make them available publicly.

[ Parent | on HN ]
Re:Git ignores .gitignore with .gitignore in .gitignore by asddubs on Wednesday May 18, 2022 @05:31AM (#31420735)
sure, if "this guy" does "git add '*'" and neither reviews the commit, nor even does git status to see a file list of it and just pushes it straight to remote. if that's happening i think your repo might have other problems though
[ Parent | on HN ]
Re:Git ignores .gitignore with .gitignore in .gitignore by pcthrowaway on Wednesday May 18, 2022 @11:06AM (#31423718)
I mean this doesn't really leak anything; passwords are usually stored in `.env` files anyway
[ Parent | on HN ]
Re:Git ignores .gitignore with .gitignore in .gitignore by naavis on Wednesday May 18, 2022 @12:07PM (#31424453)
It's not exactly best practice to store passwords in version control.
[ Parent | on HN ]
Re:Git ignores .gitignore with .gitignore in .gitignore by pcthrowaway on Wednesday May 18, 2022 @12:35PM (#31424802)
yes I'm aware.. this is why .env should always be in .gitignore
[ Parent | on HN ]