ruby on rails - Production site kept in public repository. How secure it is? -


To test, I cloned a github repo for private from the public. There were details of API keys and credentials in Readme. Reported about this by a stranger. Then I removed the public repository.Now what should I do so that there is no attack on the production site? Changing the API key, changing the password, etc. like

Your site is not more secure in personal security details made public You have to change all your secrets, including the API key and password, which includes database connection details.

Along with this, make sure to make your clone repo private or to remove it completely Adding only one commitment which removes the personal details No Support If you keep the repo public If you want, you have to follow.


Comments

Popular posts from this blog

winforms - C# Form - Property Change -

javascript - amcharts makechart not working -

java - Algorithm negotiation fail SSH in Jenkins -