Learning outcomes
- Explain how to keep passwords, tokens and private data out of repositories.
- Complete the guided activity safely.
- Check that you can publish code without exposing credentials.
Git and GitHub
GitHub Security and Secrets
Learn to keep passwords, tokens and private data out of repositories and publish code without exposing credentials in this beginner-friendly Visual Studio Code lesson.
Before you begin
Use a non-sensitive practice folder, inspect unfamiliar code before trusting it, and never place passwords, tokens or private information in project files.
Step-by-step instructions
- Open the intended practice workspace in Visual Studio Code and confirm its folder name and Workspace Trust state.
- Apply a pre-push secret checklist.
- Save the relevant files and review the Problems panel, terminal, Source Control view or browser preview as appropriate.
- Check filenames, relative paths, console messages, keyboard use, mobile layout and privacy before continuing.
- Confirm that you can publish code without exposing credentials, then create a clear commit, backup or saved checkpoint.
Ian's practical tip: Work in one named project folder, preview after small changes, read the actual error message and keep a recoverable version before broad edits.
Practical activity
Apply a pre-push secret checklist. The expected result is to publish code without exposing credentials.