What causes most git credential leaks?

Subdirectory adds ignoring root .gitignore, plus no pre-push scans — 60% of cases per security audits.

How do I scan my repo for secrets?

Run `trufflehog filesystem .` or `git-secrets --scan`. Free, instant.

Is Authelia safe after a leaked database?

Rotate all TOTP secrets immediately; re-enroll devices. Assume compromise.

Homelab Owner Commits Entire 2FA Database to Git: Days Since Leak, Zero

Two years of flawless homelab ops, shattered by one 'git add .' from a subdirectory. Here's the data-driven autopsy of a fresh credential leak — and why it's everyone's problem.

DevTools Feed Apr 03, 2026 4 min read

Terminal showing git add committing db.sqlite3 and users_database.yml files

⚡ Key Takeaways

.gitignore fails in subdirs — add them everywhere. 𝕏
Use pre-commit hooks and scanners like trufflehog to catch leaks early. 𝕏
Homelabs demand prod-level git hygiene amid rising popularity. 𝕏

Published by

DevTools Feed

Ship faster. Build smarter.

#.gitignore #credential leak #git secrets #homelab security

Worth sharing?

Get the best Developer Tools stories of the week in your inbox — no noise, no spam.

Originally reported by dev.to

⚡ Key Takeaways

The 60-Second TL;DR

DevTools Feed

Share this article

Worth sharing?

Related Stories

Dead Code Erased $440 Million from Knight Capital in Just 45 Minutes

Terraform Secrets: The State File Trap No One Talks About

Containers: Just Processes, Kernel-Constrained

Docker for Beginners: Containers That Ship Code Like Cargo Ships

Stay in the loop