Skip to content

sensitive-files.md

Latest commit

 

History

History
74 lines (47 loc) · 1.41 KB

sensitive-files.md

File metadata and controls

74 lines (47 loc) · 1.41 KB
Raw

Sensitive files

This repository keeps private files out of git.

Private folders

Use these local-only folders:

private-notes/
project-reports/
secrets/
sensibili/

They are ignored by .gitignore.

private-notes/ is treated as a private scratch folder. Do not put public project documentation there.

project-reports/ stores per-project inspection reports and may contain private metrics. It is ignored by git.

Public documentation belongs in:

docs/
README.md
AGENTS.md
CLAUDE.md

Google Search Console

Use a Google service account JSON file.

Recommended location:

secrets/google/search-console-service-account.json

Then configure .env:

GOOGLE_SERVICE_ACCOUNT_FILE=./secrets/google/search-console-service-account.json

Do not commit the JSON file.

The old SEARCH_CONSOLE_API_KEY value is not used by this project. The connector uses GOOGLE_SERVICE_ACCOUNT_FILE or GOOGLE_SERVICE_ACCOUNT_JSON.

Umami

Configure Umami in .env:

UMAMI_BASE_URL=https://cloud.umami.is
UMAMI_API_KEY=your-api-key

Do not commit .env.

If an API key has been shared in a chat, issue, screenshot or commit, rotate it from the provider dashboard.

Project data

Runtime data is stored locally in:

data/openfindability.json

This file is ignored because it can contain private project names, metrics and imported API payloads.

Only data/.gitkeep is tracked.