From 91332d7e16bd2e0508f0d5e2f305239547361157 Mon Sep 17 00:00:00 2001 From: ahmza Date: Fri, 7 Aug 2026 14:36:48 +0100 Subject: [PATCH] drop the git-secret scaffolding, which was never finished 42c805f added the ignore rules ahead of running `git secret init`, which is the right order - the rules should exist before any key material does. but init was then never completed, so the repo has been sitting on a .gitsecret containing nothing but a zero-byte paths/mapping.cfg: no keys directory, no random_seed, no pubring, and no secrets ever registered. nothing here is being encrypted and nothing is planned to be, so the rules guard a workflow that does not exist. removing both halves rather than leaving a half-initialised directory around, since the latter reads as "we use git-secret" to anyone glancing at the tree. the `!*.secret` negation goes with them. it only ever un-ignored the encrypted blobs and never protected the plaintext originals, so it is not load-bearing on its own. nothing sensitive was present at any point, and nothing was committed. --- .gitignore | 18 ------------------ 1 file changed, 18 deletions(-) diff --git a/.gitignore b/.gitignore index f0c7373..ee94c8a 100644 --- a/.gitignore +++ b/.gitignore @@ -4,21 +4,3 @@ # churns on every build, so it must not be tracked. result result-* - -# git-secret. `git secret init` writes the random_seed and the `!*.secret` -# negation; the rest is hardening. -# -# WARNING: `!*.secret` only un-ignores the *encrypted* blobs. It does nothing to -# protect the plaintext originals -- that relies entirely on `git secret add` -# appending each plaintext path below. Always run `git secret add ` from -# the repo root (never hand-edit .gitsecret/paths/mapping.cfg) and verify with -# `git status` before committing. -.gitsecret/keys/random_seed -# .gitsecret/keys is git-secret's GPG homedir. pubring.kbx is meant to be -# committed; private key material and sockets never are. -.gitsecret/keys/private-keys-v1.d/ -.gitsecret/keys/openpgp-revocs.d/ -.gitsecret/keys/*.gpg~ -.gitsecret/keys/.#* -.gitsecret/keys/S.* -!*.secret