Ignore plaintext vault dumps

Co-authored-by: CommandCodeBot <noreply@commandcode.ai>
2026-08-13 10:41:28 +08:00
parent 4ca6a3611d
commit ba82787ba5
1 changed files with 2 additions and 0 deletions
@@ -13,6 +13,8 @@ secrets/vault-pass.txt

 # Placeholder marker generated when password archive is absent
 secrets/vault-pass.txt.zip.PLACEHOLDER
+# Plaintext vault dumps must never be committed
+secrets/*.text
 # Local installer env overrides with real secrets
 install.local.env
 *.secret.env