Repo Hygiene & Protection

.gitignore

Never commit node_modules, build output, or .env files.

Secrets

If one gets committed, rotate it immediately. Rewriting history with git filter-repo is not enough on its own. Use pre-commit secret scanning such as gitleaks.

Branch protection rules

Required reviews, required CI checks, no direct pushes to main.

Git hooks

pre-commit and commit-msg hooks, with tools like pre-commit or Husky.

CODEOWNERS

Use CODEOWNERS files to route reviews.