0

I'm working on a project mainly for a bit of fun.

I set up a twitter account and wrote a python script to write tweets.

Initially i hard-coded the twitter credentials for my app into my script (tweet.py)

Now i want to share the project so i have removed my app's credentials from tweet.py and added them to a config file. I have added the config file to .gitignore.

My question is, if someone forks my project, can they somehow checkout an old version of tweet.py which has the credentials? If so, what steps can i take to cover myself in this case?

teebagz
  • 656
  • 1
  • 4
  • 26
  • Possible duplicate of [GitHub fork a repo from previous commit](http://stackoverflow.com/questions/19213840/github-fork-a-repo-from-previous-commit) – Torxed Dec 19 '16 at 09:38
  • I would definitely change my credentials. No questions about it. – Torxed Dec 19 '16 at 09:38
  • Possible duplicate of [Remove sensitive files and their commits from Git history](http://stackoverflow.com/questions/872565/remove-sensitive-files-and-their-commits-from-git-history) – 1615903 Dec 19 '16 at 10:16

2 Answers2

2

They can checkout an older version and check your credentials.

Two options I can immediately think of:

  1. Make your last version the only commit in the history

  2. Less optimal: Change your credentials

There is also an entire page about this on github: Remove sensitive data

Community
  • 1
  • 1
Stijn Diependaele
  • 568
  • 4
  • 13
1

Yes, anyone can see the old files in version history in git-hub free version. If you want to make your project secure, you have to pay for private repository in github.

If you dont wana pay, follow what @Stijin suggested.

Nabarun Dey
  • 104
  • 9