Ask HN: Best practice to prevent credentials/secrets commit to Git repo

2 pointsxinbenlv3 comments

Hi HN friends, it's july 2026 and I am assuming many of you use fully agentic building now. Securing secrets and credentials from being committed to GitHub repo has been even more critical. What's your best practice nowaday?

Thx

View on HN

Push protection

https://docs.github.com/en/code-security/concepts/secret-sec...

https://github.blog/news-insights/product-news/push-protecti...

Thanks, that's helpful. Do you use gitleaks or other library to do pre-commit protection? @toomuchtodo

Gitleaks is a fine tool to use, I would recommend its use.

Reply on news.ycombinator.com