Merge pull request 'playbook: credential committed to version control' (#1) from playbook/credential-leak into main

This commit is contained in:
2026-09-04 18:49:26 +00:00

View File

@@ -0,0 +1,6 @@
# Playbook: credential in version control
1. Rotate first. Always rotate first.
2. Then worry about removing it.
3. Deleting the branch does not remove it. Neither does force-pushing.
4. Check pull request refs, forks and CI logs before you call it contained.