docker-github-runner/.gitignore at main · blackoutsecure/docker-github-runner · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
# Environment and secrets
.env
.env.local
.env.*.local
.secrets/

# GitHub Actions runner registration / credential artifacts.
# These are runtime-only files written by config.sh inside the container; they
# must NEVER be committed (they contain the runner's RSA private key + auth
# state and would let an attacker impersonate the runner against GitHub).
.runner
.credentials
.credentials_rsaparams
.path
runner-secrets/
*_token.txt
*.pat
*.gh-token

# Common private key / cert formats
*.pem
*.key
*.p12
*.pfx
id_rsa
id_ecdsa
id_ed25519

# Editor and IDE
.vscode/
.idea/
*.swp
.*.swp
*~
*.swo
.DS_Store
Thumbs.db

# Build artifacts
*.o
*.so
*.log
.tmp-config/
tmp/

# Runtime and local development
/local/
/.local/
.cache/
*.tmp

# Version and patch files
.version
*.orig
*.rej
*.patch

# >>> bos-automation-hub:common >>>
# Managed by https://github.com/blackoutsecure/bos-automation-hub — do not edit between markers.
# OS noise
.DS_Store
Thumbs.db
._*

# Editor / IDE noise
.vscode/
.idea/
*.swp
*.swo
*~

# Local env files (NEVER commit credentials)
.env
.env.*
!.env.example
.envrc
.direnv/

# TLS / private keys
.secrets/
*.pem
*.key
*.crt
*.p12
*.pfx
secrets.*
# <<< bos-automation-hub:common <<<