{"id":11063,"date":"2021-11-29T10:00:00","date_gmt":"2021-11-29T01:00:00","guid":{"rendered":"https:\/\/www.gigas-jp.com\/appnews\/?p=11063"},"modified":"2021-11-26T19:30:52","modified_gmt":"2021-11-26T10:30:52","slug":"deleting-env-file-back-from-git","status":"publish","type":"post","link":"https:\/\/www.gigas-jp.com\/appnews\/archives\/11063","title":{"rendered":"Deleting .env file back from Git"},"content":{"rendered":"\n

Sometimes , we accidentally pushed a file with some username , password or secret tokens etc. It has a variety security concerns for your project and this should be removed back from Git.<\/p>\n\n\n\n

Git ignore<\/h3>\n\n\n\n

First thing you need to do is to add the file you don’t want to push to git at .gitignore file. Add it in .gitignore , commit and push it. <\/p>\n\n\n\n

# Secret file\n.env<\/code><\/pre>\n\n\n\n
<\/p>\n\n\n\n
But this will not change any effects to .env as the file is already pushed before and .gitignore doesn’t untracked the already committed changes<\/p>\n\n\n\n
Deleting the file<\/h3>\n\n\n\n
So we have to remove the specific file , .env in our case from the git remote repo entirely. We can use the following command. <\/p>\n\n\n\n
git rm -r --cached .env<\/code><\/pre>\n\n\n\n
<\/p>\n\n\n\n
If we push the changes , the .env file will be remove from the remote repository<\/p>\n\n\n\n
Git History<\/h3>\n\n\n\n
However, one more thing is left which is git histories. We can check the .env file contents also in git histories. So we need to remove the specific git history as well to hide the .env contents.<\/p>\n\n\n\n
To remove the file altogether, we can use like following.<\/p>\n\n\n\n
git filter-branch --index-filter \"git rm -rf --cached --ignore-unmatch .env\" HEAD<\/code><\/pre>\n\n\n\n
<\/p>\n\n\n\n
When you push this time, you have to use –force option.<\/p>\n\n\n\n
git push --force<\/code><\/pre>\n\n\n\n
<\/p>\n\n\n\n
If we look at our history, we can still see the commits that include .env file  but the content is empty.<\/p>\n\n\n\n
<\/p>\n\n\n\n
That’s all for now.<\/p>\n\n\n\n
Yuuma<\/p>\n
\n            
<\/g:plusone><\/div>\n            
 \"\u3053\u306e\u30a8\u30f3\u30c8\u30ea\u30fc\u3092\u306f\u3066\u306a\u30d6\u30c3\u30af\u30de\u30fc\u30af\u306b\u8ffd\u52a0\"<\/a>