Ask HN: Best practice to prevent credentials/secrets commit to Git repo

2 points by xinbenlv 39 days ago | 3 comments

Hi HN friends, it's july 2026 and I am assuming many of you use fully agentic building now. Securing secrets and credentials from being committed to GitHub repo has been even more critical. What's your best practice nowaday?

Thx

toomuchtodo 39 days ago |

Push protection

https://docs.github.com/en/code-security/concepts/secret-sec...

https://github.blog/news-insights/product-news/push-protecti...

xinbenlv 38 days ago | |

Thanks, that's helpful. Do you use gitleaks or other library to do pre-commit protection? @toomuchtodo

toomuchtodo 34 days ago | | |

Gitleaks is a fine tool to use, I would recommend its use.