0

Would sending a entire project to someone by email along with the .git folder exposes security issues? For example can it happen that the receiver uses this to access by ssh or https other projects from the senders GitHub account. The project is created in Intelij, is it possible that some Intelij files expose a security problem concerning git hub credentials?

1
  • 3
    If you want to share a repository with others by email, you could try git bundle. Commented May 3, 2018 at 9:49

1 Answer 1

2

It should not, but there could be exceptions here and there:

  • if you added url like http://user:password@site/git/.. to remotes
  • if your credential helper stores the data inside .git folder (I have no idea if there is some which do)
  • if you have ever staged a file with secret information - even not committed, those could be found with fsck
  • whatever I forgot about

It is really better to send a bundle as suggsested in comment

Sign up to request clarification or add additional context in comments.

Comments

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.