What is the best practice for dealing with passwords in git repositories?

I’ve got a little Bash script that I use to access twitter and pop up a Growl notification in certain situations. What’s the best way to handle storing my password with the script?

I would like to commit this script to the git repo and make it available on GitHub, but I’m wondering what the best way to keep my login/password private while doing this is. Currently, the password is stored in the script itself. I can’t remove it right before I push because all the old commits will contain the password. Developing without a password isn’t an option. I imagine that I should be storing the password in an external config file, but I thought I’d check to see if there was an established way to handle this before I tried and put something together.

8 Answers
8

Leave a Comment