Patch #20292
Ignore Secrets.yml file
Status: | Closed | Start date: | ||
---|---|---|---|---|
Priority: | Normal | Due date: | ||
Assignee: | - | % Done: | 0% | |
Category: | Security | |||
Target version: | 3.1.0 |
Description
Secrets, by definition, should be kept hidden from others. To ensure `secrets.yml` are not accidentally shared or committed to version control this patch helps by ignoring the `config/secrets.yml` file in both version control systems.
Related issues
Associated revisions
add config/secrets.yml to svn:ignore (#20292)
Contributed by Benjamin Petersen.
add config/secrets.yml to .gitignore and .hgignore (#20292)
Contributed by Benjamin Petersen.
History
#1
Updated by Toshi MARUYAMA about 7 years ago
- Tracker changed from Defect to Patch
- Status changed from New to Needs feedback
Please explain why secrets.yml is needed.
Our installation does not need secrets.yml (#19185).
#2
Updated by Toshi MARUYAMA about 7 years ago
- Status changed from Needs feedback to New
- Target version set to 101
I got it.
source:tags/3.0.4/doc/INSTALL#L56
#3
Updated by Toshi MARUYAMA about 7 years ago
- Related to Defect #19185: Update Install/Upgrade guide for 3.x version and get gid of DEPRECATION WARNING: You didn't set config.secret_key_base added
#4
Updated by Toshi MARUYAMA about 7 years ago
- Status changed from New to Closed
Committed in trunk, 3.1-stable and 3.0-stable, thanks.
#5
Updated by Jean-Philippe Lang about 7 years ago
- Target version changed from 101 to 3.1.0