-
Notifications
You must be signed in to change notification settings - Fork 59
Open
Description
Currently, config.prod.yml is being tracked by Git, which poses a serious security risk as it may lead to accidental exposure of sensitive production credentials. If credentials get committed and pushed, they could be permanently exposed in the repository's history, making them vulnerable to misuse.
To enforce better security practices and ensure smooth onboarding for contributors, we should:
- Add a config.prod.example.yml file with placeholder values.
- Stop tracking config.prod.yml and add it to .gitignore.
Metadata
Metadata
Assignees
Labels
No labels