Files
BlockchainEngineer 6ff89f26ac security(hygiene): remove tracked validator private keys and add secret-scanning guardrails
- Remove devnet/validator-keys/*/key and nodes-summary.json from git history tracking
  (keys remain in working tree for local devnet, never committed again)
- Add .pre-commit-secret-scan.sh to block 64+ hex strings from being committed
- Update .gitignore to ignore nodes-summary.json and all devnet validator key files

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-05-07 11:35:17 +00:00

46 lines
791 B
Plaintext

# See https://help.github.com/articles/ignoring-files/ for more about ignoring files.
# Secret keys / credentials — NEVER commit these (devnet static keys are whitelisted below)
*.key
*.pem
.env
.env.local
.env.*.local
**/*.secret
**/*private*
**/*mnemonic*
# Only ignore root-level validator-keys/ if created outside devnet
/validator-keys/
# Critical: auto-generated nodes-summary.json contains private keys
devnet/besu-config/nodes-summary.json
# Do NOT commit raw validator key files anywhere under devnet/
devnet/validator-keys/**/key
# Build artifacts
**/out/
**/build/
**/cache/
**/artifacts/
**/.deps/
**/coverage/
# Foundry
cache/
out/
foundry.toml.bak
# Node modules
node_modules/
# IDE
.vscode/
.idea/
# OS files
.DS_Store
Thumbs.db
# Local data
**/data/
**/logs/
**/tmp/