Heads up — found an exposed secrets file in products/io.wonop.helloworld/stack.env.secrets.yaml.
The file contains environment secrets and is committed to this repository's history, which means the values are publicly visible.
Rotate these now. The secrets are in git history, so removing the file from HEAD is not enough — they are already exposed. Revoke and regenerate every credential stored in this file with the relevant providers (API keys, database passwords, tokens — whatever is in there).
After rotating:
- Run
git rm --cached products/io.wonop.helloworld/stack.env.secrets.yaml to stop tracking the file.
- Add
products/io.wonop.helloworld/stack.env.secrets.yaml to .gitignore if it isn't already covered.
Let me know if I can help with anything.
Heads up — found an exposed secrets file in
products/io.wonop.helloworld/stack.env.secrets.yaml.The file contains environment secrets and is committed to this repository's history, which means the values are publicly visible.
Rotate these now. The secrets are in git history, so removing the file from HEAD is not enough — they are already exposed. Revoke and regenerate every credential stored in this file with the relevant providers (API keys, database passwords, tokens — whatever is in there).
After rotating:
git rm --cached products/io.wonop.helloworld/stack.env.secrets.yamlto stop tracking the file.products/io.wonop.helloworld/stack.env.secrets.yamlto.gitignoreif it isn't already covered.Let me know if I can help with anything.