Skip to content

Remove exposed APP_KEY from dev branch - #3678

Merged
bernardhanna merged 1 commit into
devfrom
fix/scrub-app-key-on-dev
Oct 10, 2026
Merged

bernardhanna merged 1 commit into
devfrom
fix/scrub-app-key-on-dev

Conversation

@bernardhanna

Copy link
Copy Markdown
Collaborator

Summary

  • GitGuardian alerted on an exposed Laravel APP_KEY in codeeu/codeweek.
  • master is already clean (Scrub secrets from devspace/.env.devspace #3677). The long-lived dev branch still had real keys in .env.example, .env.travis, and devspace/.env.devspace.
  • This brings dev in line with master for those files.

Test plan

  • After merge: git grep -E 'APP_KEY=base64:' origin/dev returns nothing
  • Resolve / mark the GitGuardian incident as remediated on the default branches
  • Rotate APP_KEY on any environment that ever used the committed values

Made with Cursor

Match master: blank .env.example / .env.devspace, drop .env.travis which still held a real key.

Co-authored-by: Cursor <cursoragent@cursor.com>
@bernardhanna
bernardhanna merged commit 3865a97 into dev Oct 10, 2026
@bernardhanna
bernardhanna deleted the fix/scrub-app-key-on-dev branch October 10, 2026 11:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant