DEV Community

Discussion on: I tried to find MongoDB connection strings over 1000 public GitHub repositories

Collapse
 
neoprint3d profile image
Drew Ronsman

Is it bad to have a private repository with all the API keys shown in that repository?

Collapse
 
zt4ff_1 profile image
Kayode

A private repository cannot be queried via the GitHub Search API.

But then, it is more secured to not include your secrets in the repository.

Collapse
 
neoprint3d profile image
Drew Ronsman

Yeah so no one will be able to look atfve repository

Collapse
 
rolfstreefkerk profile image
Rolf Streefkerk

it is bad practice, it should be stored in secured (encrypted) storage that can be retrieved in the operating environment

Some comments have been hidden by the post's author - find out more