Security S-05
.env in Gitignore.
Rotate if Exposed.
Committed to git
DATABASE_URL=postgres://...
Still in history after delete
Env vars only
.gitignore → .env
Rotate keys if ever committed
LaunchYourVibe S-05
Committed secrets live in history forever even after deletion. Gitignore .env and rotate anything that ever shipped. A deleted line in today's code doesn't erase yesterday's commit.
View all cards