From 70afc5dd96d25229d138428ec89bee0f4060d94e Mon Sep 17 00:00:00 2001 From: Richard Abrich Date: Wed, 26 Aug 2026 16:12:36 -0400 Subject: [PATCH] chore: ignore every .env variant, not one at a time .gitignore covered .env and .env.backup but not .env.bak, .env.local or .env.old. A .env.bak containing populated OpenAI, Anthropic and Google keys sat in a local stash since 2026-07-13, untracked and one `git add -A` away from being committed. Replace the one-at-a-time entries with a glob and negate the committed .env.example template. --- .gitignore | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/.gitignore b/.gitignore index baaa4842..bebd1a92 100644 --- a/.gitignore +++ b/.gitignore @@ -65,3 +65,10 @@ paper/build/ # Never-publish workspace material (strategy, prospect research, counsel packs, # personal contact details). Created ad hoc; must never reach a remote. .private/ + +# Cover every .env variant, not one at a time. A .env.bak holding live +# API keys sat in a stash for six weeks and was one `git add -A` from being +# committed; .env.backup had already been added by hand after an earlier +# near-miss. Negate the committed template so it stays tracked. +.env.* +!.env.example