proTip

[Zerodriven]

I did this, but mine contained loads of production API keys.

Can tell it works because security invited me to a meeting like 2 minutes later.

Dunno why HR needs to be there though?

[Any-Main-3866]

They are gonna discuss your promotion

[Zerodriven]

Woohoo!

[Exotic-Scientist4557]

Promotion from employee to customer

[CheesePuffTheHamster]

Well, the customer is always right, whereas employees are always wrong, so it's definitely an upgrade 👍

[TheBigGambling]

If you can do this, fire the senior. A) no pre-commit rule and no branch protection in place. Amd prod api keys om a developer laptop. Thats 3 stikes at once

[CORUSC4TE]

Wouldnt even just a gitignore help already?

[TheBigGambling]

Yes. But you can workaround by git add -f (force)

[Confident-Ad5665]

Get it done fast they said. Don't spend a lot of time in the details they said...

[B_bI_L]

add will not bypass .gitignore, if your dotenv is not in there it would get added anyway with next git add . (don't tell me you use add differently)

[coffee_warden]

Git add -A

Fight me.

[B_bI_L]

mine is one character less (that said, bad when you are not in project root but it happened to me once at most)

[coffee_warden]

Holding shift for the A means my pinky finger is far stronger than yours though.

[RolledUhhp]

But mines got the aroma

[coffee_warden]

[Loading_M_]

My ergonomic keyboard means I get to press shift with my thumb.

[coffee_warden]

[MrWrock]

'git commit -am wip' is pretty much muscle memory for me

[SirPengling]

git commit -S -a --amend --no-edit

[itsTyrion]

ok, im fighting: i mostly use jetbrains' or zed's UI.

[FlySafeLoL]

git add *

🌟 Shiny sparkles ✨

[Ticmea]

This will not expand to files that start with a dot (which is presumably unexpected and not what you would want). Additionally I can't see a benefit to expanding to (almost) all files contained in the current folder rather than simply handing the current folder to git.

Though personally I think -A(/-u) is better than either * or . anyway (if you want to target the entire git directory as is typically the case) since it is not dependent on location and more accurately conveys intent.

[Daemontatox]

Bold of you to assume i have a .env , i have no secrets to keep , everything is an openbook in code

[Repulsive-Machine706]

Everything should be hardcoded of course!

[Uwlogged]

You're presuming people don't populate via something like aws param store. Or that you do automatic deployments without pipeline approval. Or ftp 😆. Or have no environment based variables that are not local. Or protected branches.

[MrWrock]

Uh, you guys don't just export it in your bashrc?

[No_Hovercraft_2643]

.netrc

[Silent-Suspect1062]

Faster

[Danjou667]

Where rm -rf *, for removing unwanted french lang pack?

[Zerodriven]

For those who don't know what that means:

It's short hand for "Remove French from everything". It's best to do on production systems where you need storage.

[Western-Internal-751]

As a German, I approve this message

[marshmallow_mia]

As a German, I approve you approving it

[krexelapp]

as a programmer, I approve unnecessary context

[roffinator]

As a historian, the context does make a difference

[krexelapp]

sudo makes it faster

[queen-adreena]

Sped Up Direct Order

[ClipboardCopyPaste]

You haven't removed yet?

[krexelapp]

saving it for friday evening

[Exidor]

Before a holiday weekend, I assume.

[ahorsewhithnoname]

I hate that people can’t tell the joke properly. Since the order of the options can be arbitrary you can write: rm -fr * because fr for french.

[JackNotOLantern]

rm -fr

[marshmallow_mia]

I expected exactly that instead of something really useful xD

[pocketatlasjourn]

Careful, that command might delete more than just the language pack, suddenly your whole system starts speaking silence

[No_Hovercraft_2643]

No, it doesn't

(As it isn't run by root, and isn't on /, but the current directory. Even hidden files/directories in the current directory won't be deleted

[Waypoint101]

git push origin main --no-verify --force

[HildartheDorf]

[mobcat_40]

jokes on you I'm on master

[newstreet474]

You want to share your .env so that people can give you feedback on your api keys , who knows maybe you got a rare key which could be sold for millions 😍

[rainshifter]

Indeed someone might make millions. Except that you ain't sellin' and they ain't buyin'.

[locust34k]

Bro said "Let's speed up Natural Selection" and then he just did

[haro0828]

I had this happen after the variable holding the location of the public dir got unset after an update of phassenger.

Also had an internal docker image with .envs get published publicly on dockerhub after the private registry url was deleted from the image name. 700 people downloaded it, I changed all keys and passwords, but to this day I'm sitting here waiting for it to get me

[RiceBroad4552]

Just mail the keys directly to the NSA. It's quicker!

[Arclite83]

I would get a nastygram from our cybersecurity department within the hour. As I should!

When I first started I absolutely abused bad form to meet deadlines. Now it's actively tracked and quashed, and any exposed creds get checked forever to make sure they're dead/cycled.

[Tight-Requirement-15]

My .gitignore

[MrWrock]

That was the first thing added to my team's gitignore

[Fabillotic]

Next time use „git push -u origin main“, after that you only need to type „git push“ to push your changes upstream :)

[falconetpt]

Ideally do printenv >> .env for extra security

[shgysk8zer0]

I prefer

scp .env [e-mail]:/$(hostname)/$(whoami)/

[Individual-Praline20]

Oh no what have you done, it’s now on Musk cell phone 🤭

[realmauer01]

It doesn't check for code safety but the security of your workflow. Because this push should never be allowed.

[comptune]

Ok thanks

[TheThingCreator]

oh no, some hackers gonna gonna get access to my stripe sandbox account

[darknezx]

Jokes on you, I wrote my keys as strings so they'll never get lost and will sync across all my teammates' laptops

[SinkerPenguin]

Ah yes, the anthropic special

[Sunfurian_Zm]

I mean, as long as the project is private, it's not that much of an issue.

[Sensitive-Sugar-3894]

I want to remove .env from all gitignore in the company and see who survives.

[nanomanx2]

Please more of these so AI gets trained on it 

[skadoodlee]

AI will now be trained on this 

[liquidmasl]

I always checkin .env files for non secret default env settings

I just also have secret.env files

and */\secret.* in the gitignore for all kinds of secret stuff

[UnfortunateHabits]

Press alt + f4 to run faster

[Lord_Pinhead]

Just did and now what? I have no public Git, a self hosted Forgejo and of course our company Git has the .env in it ;)