From 08c7f8a55d0bb51c59fe7a544f3cfe64dc1742ca Mon Sep 17 00:00:00 2001 From: abrichr Date: Wed, 26 Aug 2026 17:26:08 -0400 Subject: [PATCH] chore: ignore every .env variant, not one at a time .gitignore did not cover .env.bak or .env.local. A .env.bak containing populated API keys sat in a local stash in another repo since 2026-07-13, untracked and one `git add -A` from being committed. Use a glob and negate the committed .env.example template. --- .gitignore | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/.gitignore b/.gitignore index fbf2d07..8b8a421 100644 --- a/.gitignore +++ b/.gitignore @@ -11,3 +11,9 @@ build/ # Never-publish workspace material (strategy, prospect research, counsel packs, # personal contact details). Created ad hoc; must never reach a remote. .private/ + +# Cover every .env variant, not one at a time. A .env.bak holding live +# API keys sat in a stash for six weeks and was one `git add -A` from being +# committed. Negate the committed template so it stays tracked. +.env.* +!.env.example