ferrumboll/shoggoth
1
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

chore: ignore dotenv variants #30

Open
ferrumboll wants to merge 1 commit from ferrumboll/harden-env-gitignore-2026w44 into master
pull from: ferrumboll/harden-env-gitignore-2026w44
merge into: ferrumboll:master
Conversation 0 Commits 1 Files changed 1 +4 -2
ferrumboll commented 2026-10-26 09:06:53 +00:00
Owner
Copy link

Summary

  • Ignore common dotenv filename variants, including .env.production and *.env files.
  • Align .gitignore with the repository secret-handling policy and prevent accidental credential commits.

Security impact

  • Criticality: Low
  • Risk addressed: plaintext credentials in unignored dotenv variants being staged accidentally.

Verification

  • git check-ignore covers representative dotenv variants.
  • git diff --check
  • nix develop --command nix fmt (blocked by local host: configured nixbld build-users group does not exist)
  • NixOS build (not applicable to this .gitignore-only change; local dev shell is blocked as above)

Notes

  • No deployment or secrets were changed.
## Summary - Ignore common dotenv filename variants, including `.env.production` and `*.env` files. - Align `.gitignore` with the repository secret-handling policy and prevent accidental credential commits. ## Security impact - Criticality: Low - Risk addressed: plaintext credentials in unignored dotenv variants being staged accidentally. ## Verification - [x] `git check-ignore` covers representative dotenv variants. - [x] `git diff --check` - [ ] `nix develop --command nix fmt` (blocked by local host: configured `nixbld` build-users group does not exist) - [ ] NixOS build (not applicable to this `.gitignore`-only change; local dev shell is blocked as above) ## Notes - No deployment or secrets were changed.
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin ferrumboll/harden-env-gitignore-2026w44:ferrumboll/harden-env-gitignore-2026w44
git switch ferrumboll/harden-env-gitignore-2026w44

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch master
git merge --no-ff ferrumboll/harden-env-gitignore-2026w44
git switch ferrumboll/harden-env-gitignore-2026w44
git rebase master
git switch master
git merge --ff-only ferrumboll/harden-env-gitignore-2026w44
git switch ferrumboll/harden-env-gitignore-2026w44
git rebase master
git switch master
git merge --no-ff ferrumboll/harden-env-gitignore-2026w44
git switch master
git merge --squash ferrumboll/harden-env-gitignore-2026w44
git switch master
git merge --ff-only ferrumboll/harden-env-gitignore-2026w44
git switch master
git merge ferrumboll/harden-env-gitignore-2026w44
git push origin master
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
ferrumboll/shoggoth!30
No description provided.