From a1f86454e353d9cf0657520c8346316a5d266294 Mon Sep 17 00:00:00 2001 From: abrichr Date: Wed, 26 Aug 2026 15:11:41 -0400 Subject: [PATCH] chore: ignore every .env variant, not one at a time .gitignore covered .env and .env.backup but not .env.bak, .env.local or .env.old. A .env.bak containing populated OpenAI, Anthropic and Google keys sat in a local stash since 2026-07-13, untracked and one `git add -A` away from being committed. Replace the one-at-a-time entries with a glob and negate the committed .env.example template. --- .gitignore | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/.gitignore b/.gitignore index e2c8b62ea..30676bbf7 100644 --- a/.gitignore +++ b/.gitignore @@ -60,3 +60,10 @@ deploy/.env # Never-publish workspace material (strategy, prospect research, counsel packs, # personal contact details). Created ad hoc; must never reach a remote. .private/ + +# Cover every .env variant, not one at a time. A .env.bak holding live +# API keys sat in a stash for six weeks and was one `git add -A` from being +# committed; .env.backup had already been added by hand after an earlier +# near-miss. Negate the committed template so it stays tracked. +.env.* +!.env.example