animate-museum-posts: ignore .env.bak* (live-secret leak containment)

7a7dad81f13243731340b187046dc74ae0ba7c1c · 2026-09-15 18:50:35 -0700 · Steve Abrams

A staged .env.bak.1788166432286 held live plaintext creds (Twitter/Grok/Replicate/
HuggingFace tokens, Postgres pw). .gitignore covered .env/.env.local but not .env.bak*.
Unstaged + quarantined the file; added .env.bak* so it can't be re-staged. .env.example
stays tracked. Rotation of the exposed creds is drafted separately (GATED).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Files touched

M .gitignore

Diff

commit 7a7dad81f13243731340b187046dc74ae0ba7c1c
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Tue Sep 15 18:50:35 2026 -0700

    animate-museum-posts: ignore .env.bak* (live-secret leak containment)
    
    A staged .env.bak.1788166432286 held live plaintext creds (Twitter/Grok/Replicate/
    HuggingFace tokens, Postgres pw). .gitignore covered .env/.env.local but not .env.bak*.
    Unstaged + quarantined the file; added .env.bak* so it can't be re-staged. .env.example
    stays tracked. Rotation of the exposed creds is drafted separately (GATED).
    
    Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 .gitignore | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.gitignore b/.gitignore
index 2ccf5d0..3b94c02 100644
--- a/.gitignore
+++ b/.gitignore
@@ -17,3 +17,4 @@ build/
 *.old
 *~
 copy-of-*
+.env.bak*

← 44929d3 Security: add rel=noopener noreferrer to target=_blank tweet · back to Animate Museum Posts · (newest)