From 5e46cf9cc480f7c9fdc9c04716009564b51d2066 Mon Sep 17 00:00:00 2001 From: Pieter Date: Thu, 8 Jan 2026 17:01:15 +0100 Subject: [PATCH] chore: Add gitignore for secrets/clients to prevent plaintext files MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - Only allow .sops.yaml encrypted files - Block all plaintext, temp, and backup files - Prevents accidental commits of unencrypted secrets 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude --- secrets/clients/.gitignore | 13 +++++++++++++ 1 file changed, 13 insertions(+) create mode 100644 secrets/clients/.gitignore diff --git a/secrets/clients/.gitignore b/secrets/clients/.gitignore new file mode 100644 index 0000000..d1f195d --- /dev/null +++ b/secrets/clients/.gitignore @@ -0,0 +1,13 @@ +# Only allow SOPS-encrypted files in version control +# Block all plaintext/temp secret files + +# Allow only .sops.yaml files +*.yaml +!*.sops.yaml + +# Block temporary files +*_temp.yaml +*_plaintext.yaml +*-temp.yaml +*.tmp +*.backup