security: harden .gitignore and pin GitHub Actions#14
Conversation
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This pull request updates the .gitignore file to prevent sensitive files and secrets, such as private keys and environment configuration files, from being committed. The review feedback correctly identifies a duplicate .env entry that should be removed to avoid redundancy.
Important
The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.
| # Security: prevent secret files from being committed | ||
| .env |
There was a problem hiding this comment.
The .env pattern is already defined on line 17 of this file. To keep the .gitignore clean and avoid redundancy, you can remove the duplicate .env entry from this new section.
# Security: prevent secret files from being committed
1 participant
This PR adds credential file patterns to .gitignore and pins GitHub Actions to SHA commits for supply chain security.