Validate Git repositories for sensitive files before pushing.
npx skills add https://github.com/Takashi-Matsumura/lion-frame --skill git-security
Please help me install this Agent Skill. Skill: Git Security Source: https://github.com/Takashi-Matsumura/lion-frame/tree/main/.claude/skills/git-security Command: npx skills add https://github.com/Takashi-Matsumura/lion-frame --skill git-security
This Skill prevents accidental commits of sensitive information like personal data, API keys, and database files to your Git repository, safeguarding against data breaches and compliance violations.
.env, .db, employee images)..gitignore.Run the git security skill to check for sensitive files before your next git push.
High-intent search queries and answers about installing and using this skill.
Pre-push validation automatically checks for common sensitive file types before a git push to prevent accidental commits. It scans environment variables, database files, and personal data like employee images to safeguard against data breaches.
To remove tracked sensitive files from git history, you can follow the correction guidance provided by the validation check. It provides clear steps to remove files from git history and add them to .gitignore, ensuring secure code deployment.
Sensitive files that should not be tracked in a git repository include environment variable files, database files, and personal data like employee images. Identifying these prevents accidental commits of API keys and protects sensitive information.
The best way to prevent committing environment variables and database files is to run a validation check before pushing code. This process lists files that should not be tracked and provides steps to update .gitignore for data protection.
Securely handle files requiring manual transfer by reviewing deployment notes generated after validation. These notes highlight sensitive files excluded from git that require manual, secure transfer to production environments to maintain compliance.
Junghyun99Audit codebases for hardcoded secrets, file exposure, and injection risks.
Devvraj10Manage environment variables and secrets across development and production environments.
ControlNetScan staged and tracked Git files for API keys, tokens, and private keys.
TeoSlayerDeploy a four-agent brand protection system with scanner, classifier, enforcer, and dashboard roles.