Walt

We tripped over this too. We had some secrets on the filestyem that were gitignored by `directory/.gitignore`, but were uploaded to spacelift during a `local-preview`. This was confounded by spacelift's...

Additionally, spacectl should mind `$GIT_DIR/info/exclude` (checkout specific and repo specific excludes) and `git config core.excludesfile` (user specific global excludes). https://git-scm.com/docs/gitignore#_description

> hey @wadells > > > This was confounded by spacelift's slack integration sharing local-preview presigned s3 url -- effectively sharing these sensitive files with the entire company. > >...

I've also encountered this same behavior with `github_actions_environment_secret`. ```hcl resource "github_actions_environment_secret" "placeholder" { repository = "test" environment = "test" secret_name = "TEST" plaintext_value = "" # placeholder value, secrets mgmt...

I invested some time in researching the best path forward this morning. Some options (not ranked in order of preference): ### Swap to DragonflyDB DragonflyDB is drop in replacement for...