Skip to content

docs: add security warning for .env files#5

Closed
shrwnsan wants to merge 1 commit into
devfrom
fix/M-002-env-secret-exposure
Closed

docs: add security warning for .env files#5
shrwnsan wants to merge 1 commit into
devfrom
fix/M-002-env-secret-exposure

Conversation

@shrwnsan
Copy link
Copy Markdown
Owner

@shrwnsan shrwnsan commented Jan 7, 2026

Summary

Add warning to README about not committing .env files to version
control. The .gitignore already covers .env, but users should
be explicitly reminded before adding secrets.

Security Impact

Prevents accidental credential leakage to repository history.

Related

Resolves #3


🤖 Generated by Claude Code - GLM 4.7

Add warning to README about not committing .env files to version
control. The .gitignore already covers .env, but users should
be explicitly reminded before adding secrets.

Resolves #3

Co-Authored-By: GLM <zai-org@users.noreply.github.com>
@shrwnsan
Copy link
Copy Markdown
Owner Author

shrwnsan commented Jan 7, 2026

Closing as out of scope - see issue #3 for rationale.

@shrwnsan shrwnsan closed this Jan 7, 2026
@shrwnsan shrwnsan deleted the fix/M-002-env-secret-exposure branch January 7, 2026 13:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

M-002: .env Secret Exposure Risk

1 participant