ruby on rails - Production site kept in public repository. How secure it is? -
To test, I cloned a github repo for private from the public. There were details of API keys and credentials in Readme. Reported about this by a stranger. Then I removed the public repository.Now what should I do so that there is no attack on the production site? Changing the API key, changing the password, etc. like
Your site is not more secure in personal security details made public You have to change all your secrets, including the API key and password, which includes database connection details.
Along with this, make sure to make your clone repo private or to remove it completely Adding only one commitment which removes the personal details No Support If you keep the repo public If you want, you have to follow.
Comments
Post a Comment