I usually have *secret in .gitignore and append .secret to any files with secrets.
That's cute, too bad it's a config file mandated by your boss and it has to be called "terribletool.yaml."
That's cute, too bad it's a config file mandated by your boss and it has to be called "terribletool.yaml."