From d2067ce2b684d7eafcef9209162abaa85d58811f Mon Sep 17 00:00:00 2001 From: Josh Luedeman Date: Thu, 17 Sep 2026 16:53:08 -0400 Subject: [PATCH] chore: harden .gitignore against secrets and local config Adds the org-wide baseline blocking kubeconfigs, private keys and keystores, Terraform state, .env files, cloud CLI credential caches, vendored dependencies and OS noise. Coverage gap this closes (measured across all 69 repos): kubeconfig not ignored in 67 *.key/*.pem not ignored in 67 id_rsa not ignored in 68 .env not ignored in 63 .env.example and .env.*.example remain tracked via negation. Removes from HEAD: backstage/certs/tls/tls.key backstage/certs/tls/tls.crt linux_key Refs POps-Rox/.github#1 Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 0543f12b-012b-495d-a226-87b651348071 --- .gitignore | 70 ++++++++++++++++++++++++++++++++++++- backstage/certs/tls/tls.crt | 28 --------------- backstage/certs/tls/tls.key | 28 --------------- linux_key | 39 --------------------- 4 files changed, 69 insertions(+), 96 deletions(-) delete mode 100644 backstage/certs/tls/tls.crt delete mode 100644 backstage/certs/tls/tls.key delete mode 100644 linux_key diff --git a/.gitignore b/.gitignore index fb405b1..f01df97 100644 --- a/.gitignore +++ b/.gitignore @@ -91,4 +91,72 @@ site *.session.sql # E2E test reports -e2e-test-report/ \ No newline at end of file +e2e-test-report/ +# --------------------------------------------------------------------------- +# Secrets & local configuration — never commit these to a public repository. +# Added org-wide 2026-09. See POps-Rox/.github#1 +# --------------------------------------------------------------------------- + +# Kubernetes / cluster credentials +kubeconfig +kubeconfig.* +*.kubeconfig +.kube/ + +# Private keys, certificates & keystores +*.key +*.pem +*.pfx +*.p12 +*.jks +*.keystore +id_rsa +id_rsa.* +id_ed25519 +id_ed25519.* +*.ppk + +# Terraform state & local workspace (state frequently embeds secrets) +*.tfstate +*.tfstate.* +*.tfstate.backup +.terraform/ +.terraform.lock.hcl.local +crash.log +crash.*.log +override.tf +override.tf.json +*_override.tf +*_override.tf.json +.terraformrc +terraform.rc + +# Environment & local app configuration +.env +.env.* +!.env.example +!.env.*.example +local.settings.json +appsettings.Local.json +secrets.json + +# Cloud CLI / credential caches +.azure/ +.aws/ +.gcloud/ +azurecreds.conf + +# Dependencies & build output +node_modules/ +__pycache__/ +*.py[cod] +.venv/ +venv/ +Lib/site-packages/ +pyvenv.cfg + +# OS / editor noise +.DS_Store +Thumbs.db +*.swp +*~ diff --git a/backstage/certs/tls/tls.crt b/backstage/certs/tls/tls.crt deleted file mode 100644 index 6486051..0000000 --- a/backstage/certs/tls/tls.crt +++ /dev/null @@ -1,28 +0,0 @@ ------BEGIN PRIVATE KEY----- -MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQDG7TP/mYPdilOP -FOWaI5YDIotVXySJwWDjAPdfJRWq+2cx2S50ytYh5wXZrrkH+twm2fZvleg8CnsP -w04YwcZcDT2fVEftdEs8QbplVkHZrPAZC+/xDS2tsDzdtZUpN7IEDX8PZl/ZmzXe -GEkibImpc20S2IwYsZOvsDRZLFzYg16hcMpe6gd+Vh2ihIPOVV9YF5V8Rh/5lh6/ -QDy2b4g/K2NHbmHOIU/XkF9qcBcs8edQQRc6pqQJgnNcoYU3jclsVHqhiqDoI4mQ -htE78K0Mp/NGH6oOhZlekxV4TZbPz/y3/cebqKjpbGEBVtdijfYSRI58flME+m+Z -BH7K3OmzAgMBAAECggEAAlDiqRglc9/XZzQMFEZTyceOLblE2KG6ugnZ1268GNiC -dA8ePlfaNFzXMZiaKOCfzYf+GYB6SrCojB9u+lTPNWUmEYPOrpILCjGNtP5TF/Cu -fuwnp/vKS1pg6wfhK7CtTuTFVO2RMhxffS11NIRk+ecRHwYMY4E1wfbgNSWSEyc3 -G1k1v6Pseaw27j3gt/wac4w0PTPNWBgGbEmDeFD0AgygHq1e+eDZYpCQmrXhpW1/ -4yW5y01Rpj5caP4ZjwpV1Y7CuOxpMtMSrGvduDXuIEjCyn6Y6nPHLsxRV2mUkEtA -2Z1AgWTfYDuY/mKD2Unk6iFhkgda5odFgw/VcBGm8QKBgQDLWf8VaCN7fIRnay8x -d3e4HF0ZUyCENXp101VNdqphyfr6kjOK70gi3xpVUgvbCDEoWGtIQzjQO2zPtdEC -Jgbh9azQLh9qbDGvrQ6cTf+rQ5FoJQGJ0Zw6G5J887T23dV7W1OR4gKBn9CdRWnR -I2JJTwE5eD3tBJa8JTgXBMVCWwKBgQD6bewjZkcC6m/fqtDOMQMVvFjrwHOZybAe -60SZaedDpaBqSLFktflMCOsUEYSpFUUrdXLZsZp3rzai3KloLhTexqTjQmN0edct -miVJXsr7ANJofD+KPrEgqYC3eeLIP+FLDXLPLPC3MHQY9iKg/H0jMTauzD6+ngZp -3LMS66PliQKBgQCA+rQwf70BthjE/9cPKRdmT5c9WNxm/wSNd13DpGCtZc8q31CR -7vNyKtApDcE3TBrh3DMvwnNmoEqD9G59TmFPMORLpvWGKtnY84sw2MgxeMnhpJc1 -Mx5EPPjNCEbfzhR6CZMYFKJCVXucRUq4vBi7JsFAEmQ00ZRKAdFxyDTVwQKBgHCO -l2QRxDj7Re0xyUfjn49VaGINzeeBTzeWZu7NOrSc7MzYf2LUp4gVOhN7DDUy6jPu -RgCyYssIZXYt17aLf7Xhcprya+EeIijM75ValcDbTbbIoYZxRwt3I/NTRSrcC1bA -ZKnZeRfdH1FYz5er5FK8++b0xf7G5/sMxy/p2XCBAoGAHzi01aASPdUHtKsmrjs+ -sMdykGFMZnalaoGm6ac4Dw2nXR+/rQcbfjiVlwRe2wj/Ow67g5iGmcl0vwI5clrx -5SioJ1voNFUKjgqReyqnDpouhb8AP5kDU3EoYYSKlT9yzc+xuYLWd12LhTyMgrnA -1k5pR9UsDbYfwZxkdpJIY/U= ------END PRIVATE KEY----- \ No newline at end of file diff --git a/backstage/certs/tls/tls.key b/backstage/certs/tls/tls.key deleted file mode 100644 index 6486051..0000000 --- a/backstage/certs/tls/tls.key +++ /dev/null @@ -1,28 +0,0 @@ ------BEGIN PRIVATE KEY----- -MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQDG7TP/mYPdilOP -FOWaI5YDIotVXySJwWDjAPdfJRWq+2cx2S50ytYh5wXZrrkH+twm2fZvleg8CnsP -w04YwcZcDT2fVEftdEs8QbplVkHZrPAZC+/xDS2tsDzdtZUpN7IEDX8PZl/ZmzXe -GEkibImpc20S2IwYsZOvsDRZLFzYg16hcMpe6gd+Vh2ihIPOVV9YF5V8Rh/5lh6/ -QDy2b4g/K2NHbmHOIU/XkF9qcBcs8edQQRc6pqQJgnNcoYU3jclsVHqhiqDoI4mQ -htE78K0Mp/NGH6oOhZlekxV4TZbPz/y3/cebqKjpbGEBVtdijfYSRI58flME+m+Z -BH7K3OmzAgMBAAECggEAAlDiqRglc9/XZzQMFEZTyceOLblE2KG6ugnZ1268GNiC -dA8ePlfaNFzXMZiaKOCfzYf+GYB6SrCojB9u+lTPNWUmEYPOrpILCjGNtP5TF/Cu -fuwnp/vKS1pg6wfhK7CtTuTFVO2RMhxffS11NIRk+ecRHwYMY4E1wfbgNSWSEyc3 -G1k1v6Pseaw27j3gt/wac4w0PTPNWBgGbEmDeFD0AgygHq1e+eDZYpCQmrXhpW1/ -4yW5y01Rpj5caP4ZjwpV1Y7CuOxpMtMSrGvduDXuIEjCyn6Y6nPHLsxRV2mUkEtA -2Z1AgWTfYDuY/mKD2Unk6iFhkgda5odFgw/VcBGm8QKBgQDLWf8VaCN7fIRnay8x -d3e4HF0ZUyCENXp101VNdqphyfr6kjOK70gi3xpVUgvbCDEoWGtIQzjQO2zPtdEC -Jgbh9azQLh9qbDGvrQ6cTf+rQ5FoJQGJ0Zw6G5J887T23dV7W1OR4gKBn9CdRWnR -I2JJTwE5eD3tBJa8JTgXBMVCWwKBgQD6bewjZkcC6m/fqtDOMQMVvFjrwHOZybAe -60SZaedDpaBqSLFktflMCOsUEYSpFUUrdXLZsZp3rzai3KloLhTexqTjQmN0edct -miVJXsr7ANJofD+KPrEgqYC3eeLIP+FLDXLPLPC3MHQY9iKg/H0jMTauzD6+ngZp -3LMS66PliQKBgQCA+rQwf70BthjE/9cPKRdmT5c9WNxm/wSNd13DpGCtZc8q31CR -7vNyKtApDcE3TBrh3DMvwnNmoEqD9G59TmFPMORLpvWGKtnY84sw2MgxeMnhpJc1 -Mx5EPPjNCEbfzhR6CZMYFKJCVXucRUq4vBi7JsFAEmQ00ZRKAdFxyDTVwQKBgHCO -l2QRxDj7Re0xyUfjn49VaGINzeeBTzeWZu7NOrSc7MzYf2LUp4gVOhN7DDUy6jPu -RgCyYssIZXYt17aLf7Xhcprya+EeIijM75ValcDbTbbIoYZxRwt3I/NTRSrcC1bA -ZKnZeRfdH1FYz5er5FK8++b0xf7G5/sMxy/p2XCBAoGAHzi01aASPdUHtKsmrjs+ -sMdykGFMZnalaoGm6ac4Dw2nXR+/rQcbfjiVlwRe2wj/Ow67g5iGmcl0vwI5clrx -5SioJ1voNFUKjgqReyqnDpouhb8AP5kDU3EoYYSKlT9yzc+xuYLWd12LhTyMgrnA -1k5pR9UsDbYfwZxkdpJIY/U= ------END PRIVATE KEY----- \ No newline at end of file diff --git a/linux_key b/linux_key deleted file mode 100644 index d69f39d..0000000 --- a/linux_key +++ /dev/null @@ -1,39 +0,0 @@ ------BEGIN OPENSSH PRIVATE KEY----- -b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABDod69uB0 -lLx4NKTfFFWAjRAAAAGAAAAAEAAAGXAAAAB3NzaC1yc2EAAAADAQABAAABgQDN0CDigMTR -IfeVgKJf4t8BD9qf0BYfUqNHHYtY9K6gxaSTBkRBmbiP/qeuVrweyJOEHkcqpTdR5xzspZ -neYu9SWHJPQQ3QYKtZwj2AnAvNehd4pa54EJ5l3VrkORRDLFfWljdKJRqZfh+qNr+KysDl -SV0+rwOI/7P5uk+lghw+m2EfErz868HIvWYfKh55iANX32VUg+mIgvpqxeoeUBtUAHywZd -9ZsN3HLAv+kfb+YkqUMsIljdak/bk8Rs1UutVsji34rXkC2+ja5MMZGieOuMuU0dKaaD5e -YbaC5rXSvpr22Zh76Tw3/kl4Uw3NHqiyP1hZvXbfqgQCbZVZ/lv6Sun+vMuEHsX7kG0IVb -pIv6hDeONZUaeyEHsh21aVWVZp4vYpxYDH1yUf/LU0OYa91/TxYw7H8+DWbHfknINLw8Cf -BnqijjbKETGtj5asaB2tGa4IiMQwOi80IbpP/hBSEpt9E2Vwru+UTZcMA6TFlv1mzJMxkC -BOMNpJkNLq9UsAAAWg52zRDbEhrB6hx18xMNIyJaJZ283PEcfWu2EeKQVEVIsF77u/3cH+ -8TG3rsj7PdbC903P8hZYU/UiRZgCw9jtjGCqOMeBrjlEvLn/VJ1Ssf48eHPPO9VcPjs8WO -6qmwtg3UgSqbRPnXl7BCuuNnRltxaDSjXki2BXRgWOLnohJQ9xnatTdv1c97FL2Gvx1vSZ -e2/bmzd37OpjmkvAXdvAdnFhzW2cXBNGWHeIZCc+yoZl8AUHkWlxpnda1dRsSKpXQbcGZu -xvj/T/Wg1kbHeXIAP6xfo6TrKfYR2Fg/xYMP6VV4KACQ5slm1qyTf4ttsoxTaMCDMMqQGB -toIPnu66hrU1c85svHVGYAhwemtN2NCtkUfs5pYPL7Gs3zo8B1QiRc7j7RB35Df35oBeKM -yvVd1UU9SoCNq8aO2/v9Z7BXYRc9MXZMeJVfKfdAbTKw4YBayjrvG7X1QbT+Ia/rY/394x -eb8G0FQa/XQYz9jHEpguIV0OnTy1b/noHJbez+sxsCRrQT9sCzJVP8en0JSuYHLCUkaVoT -x35l3c8anGYgqbN9u/0dopWAujenRZPGbCmxVEb4T09LLXPRCddBoSzmwQPt+EXpG6I9pl -I87bqewnR2PSdamTM4K0/iiB6rHR9dx5Hizj/ET7dGONTEa6ZY/q79pXeMb6IwDLa1N/FA -KgU2VU8LBrvqGkuzvRrkyuYpI8fFppW+1oMxFQ4mac0CAcS1pWvJUsJyHs5OdPITWYbTuG -aAxGZVF/n+8ylx2KNJcT8nGH7kcsPjbggxePiJegsBV4V5gUK6kR7Iw5z7qj5PCLP9TASq -MIa1/mYxZOYBWRBnzfHIMAju+Q+ZLlaYyFQfYIuodqcJSCbYsY84Xs3JPDESdPzy5UiWHL -tUmwtWFPyZkPoJyjrhRnVeNZkjlekLOQYjVMmuzKr08K9swAivCAxar55B3qUcqtTRH+oF -Bg6L+VuwCC9msv7DF++Mm5kmHwlLmncCju4A9Nhc1oyJs8CSi78Sv9uMdngMWp4Oo3q5qN -l9KE0Oy94IsR2k2YqG9Be7gSFCvCPuZNNkcqKBAkS7PrRgf1wVruyTyajLunhgpv+tzvSC -OdRPiHQ282y0jBSvXj4m59sINmTjzlIUKbdDEse7jdV1LVxaWwCBP1/l60DUI3g9RCslP5 -PHeyQ+lGQrXvzoyKx10OiAciR2jx3J5c3kwYfOhh+ZblVPiCLbQZeWBe5XKz+1QPKbLoSu -TywKs7V8kpQ8g3AQqbdsckgAtDMej8ZiVbJGr0QrSi4Gejo1TExxFts7uSdk5rNGLn2JyV -b/BUerOzTZnyVY07mNZXdhxI/8IkGcBjFUEI1vmRLZQLO+yV9Vfso7WpPuxQuy5ll9U1ra -/q3oNmy9g4Oq035lBzlS7mvFgnjynhbJnHkJ1tGk/rf34GkevVlwkVyiX6eeyrqN9lpciZ -DFwzwpFyVN3XeVOe0QGKEWIt6H+oTDliSv801MNzqgD7hCWYqtfFDc4U5Kl74/k7cNTrV7 -AEXYfgRqGiApRn8GtkNq0aexlgizXb3rHwYti9rw19bD0khWGREYUutAyRSUngL2bck15g -63KJtmrh0vUPtM+glvyL0T+0d+pbj6TJjx37DMwVBaxL+LVjnWF+RZfiaNEZEDYXC1vCj6 -T8aQTgjV7+ZeVPnah1NuSWHmUNhZsxLTN1jQ3ylnG3MAoRyoRDS3rcC9R9LxnDcGe9pANl -QAfi/FVsiDrktHEy+jdeBLL3JnDf1Y6YHD612FAn7//y9E6qJL83oWzrF5TxkVQLLMpcWF -C+5aO8WOzAFCgdDI0hqMLSwUEoTwMSSNeNx8+jw3ApeS/PJ3PrweEukb+59uHLygOVAZFK -qQlBOd7u2jzxszTEYf3i7kTDVqGrH6oYPxsVtNGWakNxfFDO ------END OPENSSH PRIVATE KEY-----