From b62bd58dae41d8048deeb8700fb4916eb3dc9cd7 Mon Sep 17 00:00:00 2001 From: abrichr Date: Wed, 26 Aug 2026 15:11:43 -0400 Subject: [PATCH] chore: ignore every .env variant, not one at a time .gitignore covered .env and .env.backup but not .env.bak, .env.local or .env.old. A .env.bak containing populated OpenAI, Anthropic and Google keys sat in a local stash since 2026-07-13, untracked and one `git add -A` away from being committed. Replace the one-at-a-time entries with a glob and negate the committed .env.example template. --- .gitignore | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/.gitignore b/.gitignore index 9c0d0a93..11e4e7ee 100644 --- a/.gitignore +++ b/.gitignore @@ -42,3 +42,10 @@ public/.openadapt-paper.pdf.tmp # Never-publish workspace material (strategy, prospect research, counsel packs, # personal contact details). Created ad hoc; must never reach a remote. .private/ + +# Cover every .env variant, not one at a time. A .env.bak holding live +# API keys sat in a stash for six weeks and was one `git add -A` from being +# committed; .env.backup had already been added by hand after an earlier +# near-miss. Negate the committed template so it stays tracked. +.env.* +!.env.example