Just like anyone can go to Github, Gitlab, Bitbucket, etc. and get a full workin... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

Spivak on June 12, 2017 | parent | context | favorite | on: Don't publicly expose .git (2015)

Just like anyone can go to Github, Gitlab, Bitbucket, etc. and get a full working copy.

If your code is public then what does it matter? If it's not then you should be protecting it like any other sensitive information.

partycoder on June 12, 2017 | [–]

You make the assumption that code is public and in a git hosted service. Neither of those are necessarily the case.

You can unintentionally expose your repository by deploying .git by mistake.

vultour on June 12, 2017 | [–]

Who said the code was public?

Consider applying for YC's Summer 2025 batch! Applications are open till May 13
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact