Closed chessai closed 4 years ago
Please don't use gitignoreSource
on credentials. They will be world-readable in the Nix store.
If you do want to take the risk, I just wrote a pr to document gitignoreFilter
. https://github.com/hercules-ci/gitignore.nix/pull/36
Ah, crap. I forgot about that issue. I'll close this, thanks.
there are some files in a .gitignore which nix might need to build, such as config files with credentials that shouldn't be checked in. would you be open to having this as a feature? i'm imagining an argument which is just a list of items to be kept around.