apunkt/SurfSense
1
0
Fork 0
mirror of https://github.com/MODSetter/SurfSense.git synced 2026-04-26 17:26:23 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

Recurse rules

Browse source
This commit is contained in:
Vincenzo Incutti 2025-08-04 14:02:13 +01:00
parent d98dfd40b5
commit 7cc8cd6127
5 changed files with 107 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

22
.rules/no_env_files_in_repo.mdc Normal file
View file

@ -0,0 +1,22 @@
```yaml
name: no-env-files-in-repo
description: Prevent committing environment and configuration files containing sensitive credentials
globs: ['**/.env', '**/.env.*', '**/config/*.yml', '**/config/*.yaml']
alwaysApply: true
```
Configuration files like `.env` should never be committed to version control as they often contain sensitive information like API keys, passwords, and tokens.
❌ Bad - Committing .env files:
```
POSTGRES_DATABASE_URL=postgresql+psycopg2://user:password@localhost:5432/db
API_KEY=sk-1234567890abcdef
```
✅ Good - Use .env.example instead:
```
POSTGRES_DATABASE_URL=postgresql+psycopg2://user:password@host:5432/dbname
API_KEY=your-api-key-here
```
Add `.env` and similar config files to .gitignore and provide example templates instead.