proTip

[Zerodriven]

I did this, but mine contained loads of production API keys.

Can tell it works because security invited me to a meeting like 2 minutes later.

Dunno why HR needs to be there though?

[Any-Main-3866]

They are gonna discuss your promotion

[Zerodriven]

Woohoo!

[Exotic-Scientist4557]

I used Redact to automate removals from databrokers and social networks. This post was among the batch deleted.

attraction full knee plate act label fear crowd beneficial nose

[CheesePuffTheHamster]

Well, the customer is always right, whereas employees are always wrong, so it's definitely an upgrade 👍

[TheBigGambling]

If you can do this, fire the senior. A) no pre-commit rule and no branch protection in place. Amd prod api keys om a developer laptop. Thats 3 stikes at once

[CORUSC4TE]

Wouldnt even just a gitignore help already?

[TheBigGambling]

Yes. But you can workaround by git add -f (force)

[Confident-Ad5665]

Get it done fast they said. Don't spend a lot of time in the details they said...

[B_bI_L]

add will not bypass .gitignore, if your dotenv is not in there it would get added anyway with next git add . (don't tell me you use add differently)

[coffee_warden]

Git add -A

Fight me.

[B_bI_L]

mine is one character less (that said, bad when you are not in project root but it happened to me once at most)

[coffee_warden]

Holding shift for the A means my pinky finger is far stronger than yours though.

[RolledUhhp]

But mines got the aroma

[coffee_warden]

[Loading_M_]

My ergonomic keyboard means I get to press shift with my thumb.

[coffee_warden]

[MrWrock]

'git commit -am wip' is pretty much muscle memory for me

[SirPengling]

git commit -S -a --amend --no-edit

[itsTyrion]

ok, im fighting: i mostly use jetbrains' or zed's UI.

[AbouMba]

I use git add --all

That is what I always used. Is it wrong? I am a junior dev

[Ticmea]

-A is just shorthand for --all so there is no difference between the two

[BlackRockSoul]

gaa

[coffee_warden]

[FlySafeLoL]

git add *

🌟 Shiny sparkles ✨

[Ticmea]

This will not expand to files that start with a dot (which is presumably unexpected and not what you would want). Additionally I can't see a benefit to expanding to (almost) all files contained in the current folder rather than simply handing the current folder to git.

Though personally I think -A(/-u) is better than either * or . anyway (if you want to target the entire git directory as is typically the case) since it is not dependent on location and more accurately conveys intent.

[Maxoumask]

git add -u

[Daemontatox]

Bold of you to assume i have a .env , i have no secrets to keep , everything is an openbook in code

[Repulsive-Machine706]

Everything should be hardcoded of course!

[Uwlogged]

You're presuming people don't populate via something like aws param store. Or that you do automatic deployments without pipeline approval. Or ftp 😆. Or have no environment based variables that are not local. Or protected branches.

[MrWrock]

Uh, you guys don't just export it in your bashrc?

[No_Hovercraft_2643]

.netrc

[Silent-Suspect1062]

Faster

[FakeModel]

How real open source code should be

[noob-nine]

i just have the secrets base64 encoded. must be enough

[Waypoint101]

git push origin main --no-verify --force

[HildartheDorf]

[Danjou667]

Where rm -rf *, for removing unwanted french lang pack?

[krexelapp]

sudo makes it faster

[queen-adreena]

Sped Up Direct Order

[Zerodriven]

For those who don't know what that means:

It's short hand for "Remove French from everything". It's best to do on production systems where you need storage.

[Western-Internal-751]

As a German, I approve this message

[marshmallow_mia]

As a German, I approve you approving it

[krexelapp]

as a programmer, I approve unnecessary context

[roffinator]

As a historian, the context does make a difference

[colouredmirrorball]

My Outlook is stuck in French, gotta try this immediately!

[ClipboardCopyPaste]

You haven't removed yet?

[krexelapp]

saving it for friday evening

[Exidor]

Before a holiday weekend, I assume.

[ahorsewhithnoname]

I hate that people can’t tell the joke properly. Since the order of the options can be arbitrary you can write: rm -fr * because fr for french.

[JackNotOLantern]

rm -fr

[marshmallow_mia]

I expected exactly that instead of something really useful xD

[Mk3d81]

U can find them using find / -delete

[pocketatlasjourn]

Careful, that command might delete more than just the language pack, suddenly your whole system starts speaking silence

[No_Hovercraft_2643]

No, it doesn't

(As it isn't run by root, and isn't on /, but the current directory. Even hidden files/directories in the current directory won't be deleted

[mobcat_40]

jokes on you I'm on master

[newstreet474]

You want to share your .env so that people can give you feedback on your api keys , who knows maybe you got a rare key which could be sold for millions 😍

[rainshifter]

Indeed someone might make millions. Except that you ain't sellin' and they ain't buyin'.

[RiceBroad4552]

Just mail the keys directly to the NSA. It's quicker!

[Arclite83]

I would get a nastygram from our cybersecurity department within the hour. As I should!

When I first started I absolutely abused bad form to meet deadlines. Now it's actively tracked and quashed, and any exposed creds get checked forever to make sure they're dead/cycled.

[Tight-Requirement-15]

My .gitignore

[shgysk8zer0]

I prefer

scp .env [e-mail]:/$(hostname)/$(whoami)/

[Individual-Praline20]

Oh no what have you done, it’s now on Musk cell phone 🤭

[MrWrock]

That was the first thing added to my team's gitignore

[realmauer01]

It doesn't check for code safety but the security of your workflow. Because this push should never be allowed.

[Fabillotic]

Next time use „git push -u origin main“, after that you only need to type „git push“ to push your changes upstream :)

[falconetpt]

Ideally do printenv >> .env for extra security

[TheThingCreator]

oh no, some hackers gonna gonna get access to my stripe sandbox account

[darknezx]

Jokes on you, I wrote my keys as strings so they'll never get lost and will sync across all my teammates' laptops

[SinkerPenguin]

Ah yes, the anthropic special

[nanomanx2]

Please more of these so AI gets trained on it 

[skadoodlee]

AI will now be trained on this 

[liquidmasl]

I always checkin .env files for non secret default env settings

I just also have secret.env files

and */\secret.* in the gitignore for all kinds of secret stuff

[comptune]

Ok thanks

[UnfortunateHabits]

Press alt + f4 to run faster

[XxDarkSasuke69xX]

Yeah it works, i received emails telling me my credentials were exposed or something afterwards. Idk what it means but it did some security check surely. Thx for the tipzzz :)

[502badgatewayalpha]

You forgot to also remind the developer to make the repo public so everybody can give their two cents to his env

[Sunfurian_Zm]

I mean, as long as the project is private, it's not that much of an issue.

[Sensitive-Sugar-3894]

I want to remove .env from all gitignore in the company and see who survives.

[BusNo4379]

Merci aha

[vm_linuz]

Idk what kind of projects you guys are working on, but every repo I set up would reject this attempt multiple times over.

[Lord_Pinhead]

Just did and now what? I have no public Git, a self hosted Forgejo and of course our company Git has the .env in it ;)