Ask HN: Best practice to prevent credentials/secrets commit to Git repo

[xinbenlv]

Hi HN friends, it's july 2026 and I am assuming many of you use fully agentic building now. Securing secrets and credentials from being committed to GitHub repo has been even more critical. What's your best practice nowaday?

Thx

[toomuchtodo]

Push protection

https://docs.github.com/en/code-security/concepts/secret-sec...

https://github.blog/news-insights/product-news/push-protecti...

[xinbenlv]

Thanks, that's helpful. Do you use gitleaks or other library to do pre-commit protection? @toomuchtodo

[toomuchtodo]

Gitleaks is a fine tool to use, I would recommend its use.