search

jarodburchill / project-automation

Python script for creating new projects (React, Express.js, Vue, Laravel, etc.) in the desired local directory, with a GitHub origin.
MIT License
43 stars 7 forks source link

Username and Password in script.config may be too insecure #11

Open jarodburchill opened 5 years ago

jarodburchill commented 5 years ago

We need to find a good way of securing this data and make sure it never ends up in git history. Alternatively, we just make users enter their password no matter what.

ajnieset commented 5 years ago

we could just make it so that it reads in environment variables via os. This puts the onus on the user to set environment variables but is generally a secure practice

Rexogamer commented 5 years ago

would a gitignore suffice?

ajnieset commented 5 years ago

i dont think we want to ignore the whole file. just the username and password

Rexogamer commented 5 years ago

maybe we’d make a separate file for the username/pass (eg script2.config) and .gitignore that