xworkmate-app/.gitignore
Haitao Pan 7fa9018d53 security(docs): remove plaintext review credentials, inject from .env
The svc.plus review password and the two bridge tokens were committed in
plaintext across the manual case / API test docs. Replace every value
with a `.env` / secret-store reference and add a tracked .env.example
template. Harden .gitignore (.env.*, *.local.env, secrets.env) while
keeping !.env.example.

Note: git history was rewritten separately to purge the leaked values;
the credentials must be rotated regardless.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-29 10:57:31 +08:00

82 lines
1.3 KiB
Plaintext

# Miscellaneous
# Secrets / local env — never commit real credentials. .env.example is the tracked template.
.env
.env.*
!.env.example
*.local.env
secrets.env
.playwright-mcp/
*.py
null/
test/golden/failures/
*.class
*.log
*.pyc
*.swp
.DS_Store
.atom/
.build/
.buildlog/
.history
.svn/
.swiftpm/
migrate_working_dir/
tmp/*
!tmp/.gitkeep
.worktrees/
_codex_worktrees/
# IntelliJ related
*.iml
*.ipr
*.iws
.idea/
# The .vscode folder contains launch configuration and tasks you configure in
# VS Code which you may wish to be included in version control, so this line
# is commented out by default.
#.vscode/
# Flutter/Dart/Pub related
**/doc/api/
**/ios/Flutter/.last_build_id
.dart_tool/
.flutter-plugins-dependencies
.pub-cache/
.pub/
/build/
/macos/build/
/dist/
/coverage/
# Symbolication related
app.*.symbols
# Obfuscation related
app.*.map.json
# Android Studio will place build artifacts here
/android/app/debug
/android/app/profile
/android/app/release
/android/key.properties
/*.p12
/*.mobileprovision
/*.keystore
# Rust / FFI artifacts
/rust/target/
/rust/Cargo.lock
/macos/Frameworks/*.dylib
/macos/Frameworks/*.a
# Gradle artifacts (including third_party)
**/.gradle/
# Repomix — dynamically generated, not committed
repomix-output.xml
# Flutter analyze — local diagnostic dump
flutter_analyze_output.txt