chore(security): .gitignore + .gitleaks.toml защита от CMS-export leak
Превентивная защита от случайной публикации content/logs, content/data, ghost.*.json (см. инцидент moovg_ru 2026-05-24). Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
This commit is contained in:
13
.gitignore
vendored
13
.gitignore
vendored
@@ -1,3 +1,13 @@
|
||||
# Security: НЕ коммитить production logs и CMS data exports
|
||||
# (могут содержать API keys, JWT, private_key). См. инцидент 2026-05-24.
|
||||
content/logs/
|
||||
content/data/
|
||||
*.production.log
|
||||
*.production.log.*
|
||||
ghost.json
|
||||
ghost.*.json
|
||||
*.ghost.*.json
|
||||
|
||||
# ---> Node
|
||||
# Logs
|
||||
logs
|
||||
@@ -134,5 +144,4 @@ dist
|
||||
.yarn/unplugged
|
||||
.yarn/build-state.yml
|
||||
.yarn/install-state.gz
|
||||
.pnp.*
|
||||
|
||||
.pnp.*
|
||||
Reference in New Issue
Block a user