Safely Storing Secrets in Git
I've worked on many projects where sensitive information is stored in a git repository. This includes SSH keys, SSL private keys, API keys, passwords, and client secrets. This practice is easily labelled Not Good. You might be thinking, "Why should I worry? Our GitHub repository is private, and only our team can access the secrets!" …
