From b3d10d9dedd22336ee015c471b51a380feb5bc89 Mon Sep 17 00:00:00 2001 From: mozluk <160273088+mozluk@users.noreply.github.com> Date: Fri, 21 Aug 2026 23:49:10 +0300 Subject: [PATCH] Fix: Prevent accidental exposure of local deployment environment files ### Description This PR addresses future secret-file exposure risks within the `contract-deployments` repository. **Vulnerabilities & Security Defects Remediated:** * **Future Secret-File Exposure (`.gitignore`):** Local deployment environment files were not consistently ignored, creating a risk of accidentally committing sensitive configuration or deployment secrets. The repository's `.gitignore` policy has been updated to explicitly ignore `.env`, `.env.local`, and `.env.*` files. This ensures that any new local environment copies are safely untracked by default. --- .gitignore | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.gitignore b/.gitignore index 3a97aff26..9fc04ceb6 100644 --- a/.gitignore +++ b/.gitignore @@ -22,6 +22,8 @@ out/ yarn-error.log .env.local +.env +.env.* .gitmodules