search

awslabs / git-secrets

Prevents you from committing secrets and credentials into git repositories
Apache License 2.0
12.36k stars 1.17k forks source link

.gitconfig file has universal read perms - should be restricted to current user #254

Open jintymacginty opened 4 months ago

jintymacginty commented 4 months ago

I noticed that the .gitconfig file is set to 644 permissions -rw-r--r-- 1 username username 355 Jun 7 11:52 .gitconfig

If I had any actual passwords in the file, they would be readable by anyone - should it not be set to 600 by default?