From cbaf74de0e7b85c40a4a537fadad653b7c825aaf Mon Sep 17 00:00:00 2001 From: William Carroll Date: Thu, 20 Aug 2020 11:53:14 +0100 Subject: [PATCH] Setup git-secret This morning I'm attempting to secure my monorepo. How? - `git secret`: DONE: To version-control sensitive data - `git secrets`: TODO: Lint code for sensitive data I will probably update the CI to call `git secrets --scan` or some similar command to fail when that exists non-zero. I have much to learn, but doing is the best way to learn it. --- .gitignore | 2 ++ .gitsecret/keys/pubring.kbx | Bin 0 -> 6799 bytes .gitsecret/keys/pubring.kbx~ | Bin 0 -> 32 bytes .gitsecret/keys/trustdb.gpg | Bin 0 -> 1200 bytes .gitsecret/paths/mapping.cfg | 0 5 files changed, 2 insertions(+) create mode 100644 .gitsecret/keys/pubring.kbx create mode 100644 .gitsecret/keys/pubring.kbx~ create mode 100644 .gitsecret/keys/trustdb.gpg create mode 100644 .gitsecret/paths/mapping.cfg diff --git a/.gitignore b/.gitignore index e7ee823e5..911fce105 100644 --- a/.gitignore +++ b/.gitignore @@ -31,3 +31,5 @@ node_modules/ /configs/.config/fish/fish_variables /website/blog/public/ /emacs/.emacs.d/tramp +.gitsecret/keys/random_seed +!*.secret diff --git a/.gitsecret/keys/pubring.kbx b/.gitsecret/keys/pubring.kbx new file mode 100644 index 0000000000000000000000000000000000000000..692d5c67b04b379a63d59fe3b322735f382586a7 GIT binary patch literal 6799 zcma)91yEe=k{yNt26uN4?rwv-1%kV~2Y1&H2o_v}2KON$Ko~UG1Sdd%kl+$rm%M*d zZ)@vS?RM3z>f8N&RrhwCK7ASh0MH;H0D!7826liaGndqk{qy|s|1mOmAi}@AQ2>B6 z4FCdAgvO;>yFaQAH?vqFVuXmKE@A!Y(-@kba!~_|NEcPMb0Oppy2LnYF20Ow=p)!#_yt6yz zz^qaqvXC_rs;D_fSD{c>1kCPqgj8)tuYTBIi)!^WtGn59CSOKH>DZuyoDSyQdr|F? zU1@5yc4#^#7P|zQk#3h)W%@-pvHdMZ+QkMxV99EDE1SmKnx9RiK2BF4G@SR_&4e83 zLRLqJhHk1(OEHrK{<6}6O%hmyjBAlcX0eZ@ui-;-0Hy<8JJN!Pw_G#5)1^9{)78iM z6GQ5ifINQrgj9FYD`gXc$H5T;T(qwVlH3+|eLh`d<$0_5fo4vYr(FuNfIE-o-a4gI zdi#K!yT-S_#s!7z#^paP;(v}mrk)3?y8;!b)tbI|WW;sbQ_^|&x$R%bsJ@}+8^YlX zJQUrTE%-oE@>SBK!|a!#3bYIJ`SX#wQ1!y^o+;KR z-IcTJrro_e6leqil4 zpQ0aT2ioI2@!GC1Dw#w1^=xK;$g6}m6+6cPnw%HJ0`%4|qSdIl4*j1?EQz?TLaKZu zy4@DQxW|`4UY;x`-$hsOiZM&S241aJy0-yv5da8{Pl&Sju>S|!fL3~aM;8}IOII3M zOD`{X7Z)0FKM(6aF2vr|($R&}+TB(1zpnuQL0$q-7le-h21pXog8oxWAOZit4M>iN zgog3IRwQ4nRZ2`P)Tg?%4N4ti5k53$~1h3nL@h zNQxZdk^Rr{ciYObGQPoqZyh?H4^h)o|K&`qH2zOgkdB{Ex{na}Y zie}dlr#Dk%A)VNOevy@>7P*i++85MCaNbJKU*a}XwbpY}P8u3#a+v>H$7dQ$7gTt~ zP2**Rc)%z`F5c|mlkB#)UFwb~?fr5%zxUg8);#AVlDB5d@}DXA~6QWXLpXe_Ga$AET;3Y>29Tmc?} z6V-W*$+LGpk!;r5-e)XKKS{ARJJRgBa`1o({VE1^&kcJdidJ%}?nUzJg1AT1JQX_F z7yvR`6{6s=ROAj?LYfgtR6iOaW?d8Eqyj5(eK3=vu4FWes>Q%jy~c!M-RS9xelw~v z-Bg;EnRyQCm28(oTvacKd8*vcE8`GW7}_T+;{z^2ssBiFG-2944lp0q<4$T(O=tpm zl+`FxH*V%3oo-wQ+Spgirrk^>qx-V1(@RqY`*_SWA_EYga0y62-~-`2!He<Cbub{8d*b$U!O2>FkT^Ichjq?-(*0<3 zsvOn`Ts;($=jKZsKpge^Xvfk>IGo{jOb-f0(1XXKxhZB=&W-s?RFuQm>Cn`zIgNFS zzo3D;AcsD4pLYW)@*leF_7_Be+QB4|-Go(a5*+6NicOyj+jWijl04}WnsWkksA#39 zS9iGgHs_F4CoCE0?d2)pBP&UR>_LDjNAyDsfc9-g9=jm%uiIuVwb}iFbs8KmTD|7Y&YsQ}RJKTExiNDEI}F7xkHH5fjkYs1@1%e(SfBza~k#Qw;bt zrNo6#q`sPAN6OkUJNj*}za-$Jqr<#wlF(E2{&Y1U0r>Cg;a_uc7#xk+IX=^9U1>B{ zyUM+@d#c{Y39diY`x~J_!vPG4LOPn*=0|_`kq(A;5AEipeb}22j2%AsHtt|94;p0d zJ0NO%qnIa^cK`vG*t_0)mNgQ&!B|tC^O%ihbj)?W8mg_R_rEaX zCkCN#z5Ixt!o%)0QTuJV+-o2`(C=g}?F;Lvv8h?_N-J}a!%W55Hzx~%(nd|cDIUpC z{bW+X{Rtx5Sch}=P6k?K@bwGL>T@ji;z&NI1DTTbZV&3tcR6b#}^Vw38%Noh*w**b{RKK*{K*Tt;M2z*(fv@lWV!yUE*# zW>j~fCs*9d&VE(-_<{1Yt+v%?b6O2iq+sV_dq&jzv)C%;VQ{r=&0^KVelWfrX+y(e zP^U@StZlW5cIrKvH6JW?mYzKx^yRDkdxn7f#zji$*-P@J?Mf z>RzDJJ$1Z+N`ux*jXqEqxzQjFTAr*OYbbn0$0~QiQulccBVPqq4yy2y#QtOSWyEv+ z#m`ld*4mb;wZ3n7%S)A3Re_)zKziJJ%8wqIihTMY8fZV=FDfXef)-ZWgkE}2IV_c==;jon0b}vGYOlXXHtMv8e zGQu{CcIYm*W`DQ0{S~>{7GLO?-FrG2>zcqMp%rO5J6C!~M=>_hD<((92BSUp@12L_ z2@c8>NbV17jkm;?|I!KxKyeVs6Bjf6AEO@QpHcrmN4mQP_5)8_Gl^kR(A*uM-?bL$ zVMQ%7@lV$7;WWpo= zd+p2(>Qc~W2gbsLZpnypBbqHlkrNR1H9muu5H@#dpP(Q zJ;k)^#=lV{j;e^P`qE!A}*8SbZMzi%&=S z!;=T+&gKCxvAWe$Myxvvu#2(%5G8n@->l*Kzk76%pYiuk3kBzNWv=u|x|6y1Q!&vn zcZ4JzfzyT>kMfW4&O(LT7Ieew=;0fXyIo!4om=OwrV_5V)@gM!V_F0p%hA4IGm^bP z)oy1Xia%G;PXh8iP}7)i6I}^Jn&2RD>0-%|O6TuL{}-)DPMAEcAhQViVKBl^9F3Fu z3A9OMKkBZzm@C)C4DrA!p97H8+o7|UG^xl%UiT*b>D@IhOIS=bk^d4`%o=^xsM zVB{u@BJR&#k;^~Il^cb)T3_;-+IY36ERZc_=*BZQz0(j%_Zc6F;Tc}kAegMxDz)WS zfjg{WGwI8oKkU|S*R|lP-!#wN%r?U2(a&8>!Qs-}C1RN?xwI6c{IEs$o%}TT)x6~a zJdb&Sq%7S3(JMuaPwn`se@nXN` zP5R^Tz_O7=`IefN?;0!3=IfYQojytK=3<-~V`Pz!h9$8U^@jNOh+R}al;37reXDV( zX~C2+c99$7e`|@)f<~`+<)&m!KZ~78Dj!iZ(5X|X-&}6%<=~WUv}?k9?T(Cr!qy6_ zrhX`2z1p!bDaEkD_%Nqvr(?KC1EzO0IKb4GAzJM;{LsuDAisZHtNiY6_P zvRu&?CHq&<1>bi?qb$FWu@Alq5=k>Ea$ktnD6!bJ)PrfbkhDFW);!MeYWd32)wj_ei?@)t)ZzZ;1DHzn!TUaQ32BD^&FD8|l>N<%8B| z73$D_qM2DX(4>qH8f`lX-^D-87R!lB`v|U+I4j}aqZnJLc;R|a zqf82PW%Bsl)Vd-XE93HNVDpfY*;F9ytfr|++Zx9m%tbpJX^UIGP_D<%Vc3EplWN7; z({Mvk*QfFHA)!+Zc!qxaYP=_)jmU6p%UCVHg^?q6*13w91hK%PQj(8Cvw6<0V)v8C zi$+`eGR80YdGeb?>A>aw-|3L#jg*gsRncUKQa0Lm52BOV+x32=aJ~)@_x7$+c+-WZ zFEwgPODU(&F6>SPDt_I|_glUs|1mor*88C%zNyw_{uJiD*U-FJ75$32a;=Q`A!1b1 z;P+d)ITo!J0nNKKaH;)Ep=IIs@WEd*1ivJ6gx2 zqZ;LBF}L#zduIXn0ni?FoEG~=#BbSwt6iZl&N9m-bf$mZ8hf}&bN6GecTsMd)uYxWy8`*vQKy*&&}hUk!NHw%i)lq2M;AGd&`y1^#}g zbaF7|JkK-X0s~>7lGVD2-Xqk#+t#d9{;J(>_Em-zhDf&TUMwpf>JJHcF-D_Q5I-zb z&qaZMTS8OLsK!c_edWAI&yOPJDUHVXfa+< z*Boi?4VPf$Oetj`?B3FK{#n>>AopPITE28VacRAZQbzo;D3xRZ+Za3D z_ClmUHZT^pedMQ}akk`Fx5hg?{lA9M=F>3x24`f!X)7hDY!N$2aw>M&rV|MvpSbL{ z`T0y+IDUyQ*?Vd6E$?Ne*c9apX4*)q#;-IfyjRBfa0c9J+S9Ut7)Kw|%~0){L9$Mye*iKcvemnjshJ49g&E0et%4;B><|WFjZx^3f zs9>{E8u9odY_!-)1{ddN%@PLRt0o-kf@`q@52#olE_-Pa^9N1mBc>%99ED5?U$~9 zg`m547q@=N2k1$Fy>|G>qiz(53~z|We4N2>#wiMp%Gpu;eb}7U`vu9-+8TQ=4jGzT1U1S` z(lIS$|5CNlBk~+Xx>jS+;+eI;|Nm-S$%#!M`G3&3DWy1o@@m`oO_Q66RNfVUaKYxv z$^`iMl>1lsasnE~u<$S=9RqLZV90x!iG;8aaV(gsC-S+ve%(W)kM-C$f#_vSmtxxPn4Q);C%iIttf=O}2`A zI+p9^LJ%*4AC{;)QpiybpFv0Dg!kB)db24(3jioH+fysVQt|PlmetUvIB(<4oOkwa z%{X8!Jn-S;WPv8vx~J!O*I#uS-K!g{!{J`hgJ@vERt+w&{UhKGA;*iMSiKW@#_kO< z|EGsV;QQ)LPyD83b!0K*x`2>%cPz+yLpRS=U5lc(o5}YnRHkhuIc%YT(s&0(3JW~1 zB|pM7KS{#hdJCm;sJp=wV&fJw5lcq=TzqHT$h(XrcJr8%na|>BXGBW`dI|kbbBVC# zRA1M=mJgaAyGm)^1QRU zO)Cftc|8}Mb{@}2A%))CM?Zk(0&@)M6Fbql3bDI0syL0z65|qNGwIVE5AvqYyA7Ml zQaD*dNF{@-iig0a7CV&uu9E z5eE?OOQg9^V}+nSeSl~IubA{Iw9Ka!Ar`rVoE;W7Y4zElkx3W$j&kv2CekIYgvpPT zcm@A*qkDHohBW`3f5FG6kvF-8-v3Kcx{&uo?PI@uX5STgh2wvnhYG(rpJR? zNO^^k`fTl)RrbyrSno4FOd~>YO zAVvli)_Oewn3aRd5<7Kb6_L#|rQ>I)tLd5}k&moNY~x`15O{;5%4lft*iRn(7U# z&(+-jL75jjMXQHmo|8cX+Wk%%{`_DfdsA@FEKVn+`ozm>!(w*34A;o&=QZRnQuKT6 WTcP5(=L;7>-+n-f>B)m2nEwUWa8|7V literal 0 HcmV?d00001 diff --git a/.gitsecret/keys/pubring.kbx~ b/.gitsecret/keys/pubring.kbx~ new file mode 100644 index 0000000000000000000000000000000000000000..c0a748ce2c37a0225e18f72cf81dd13d23ef6e79 GIT binary patch literal 32 ecmZQzU{GLWWMJ}kib!Jsf_S^YHV_7}K>z?m*#uYs literal 0 HcmV?d00001 diff --git a/.gitsecret/keys/trustdb.gpg b/.gitsecret/keys/trustdb.gpg new file mode 100644 index 0000000000000000000000000000000000000000..369485be0624d934e8792ed59755130e548976db GIT binary patch literal 1200 zcmZQfFGy!*W@Ke#Vql233v6S+4j8$xi(`n6s>28pu)t`zjD`y+1V+;VW$6F_h;9Ss literal 0 HcmV?d00001 diff --git a/.gitsecret/paths/mapping.cfg b/.gitsecret/paths/mapping.cfg new file mode 100644 index 000000000..e69de29bb