github-ai-engineering-framework/.gitignore at main · christopherpaquin/github-ai-engineering-framework · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
###############################################################################
# GitHub AI Engineering Framework - .gitignore
#
# This file follows the standards defined in docs/ai/CONTEXT.md
# Secrets, runtime artifacts, and generated files must never be committed.
###############################################################################

# ---------------------------------------------------------------------------
# Environment variables / secrets
# ---------------------------------------------------------------------------
# Per docs/ai/CONTEXT.md Section 7.1 - Secrets Management

# Standard environment files
.env
.env.*
!.env.example

# Alternative env naming (supported, but discouraged in favor of .env)
vars.env
vars.env.*
!vars.env.example

# Generic secrets
secrets.*
*.secret
*.secrets

# ---------------------------------------------------------------------------
# API Keys and Access Tokens (Section 7.1.2.1, 7.1.2.2)
# ---------------------------------------------------------------------------
# API key files
*api*key*
*apikey*
*access*token*
*oauth*token*
*refresh*token*
*pat*
*personal*access*token*

# ---------------------------------------------------------------------------
# Cloud Provider Credentials (Section 7.1.2.4)
# ---------------------------------------------------------------------------
.aws/
.gcp/
.azure/
.terraform/
terraform.tfvars
terraform.tfvars.json
*.tfvars
*.tfvars.json

# GCP service account keys
*service-account*.json
*gcp*.json
*gcloud*.json

# AWS credentials
.aws/credentials
.aws/config
aws-credentials.json

# Azure credentials
.azure/credentials
azure-credentials.json

# ---------------------------------------------------------------------------
# Cryptographic Private Keys (Section 7.1.2.5)
# ---------------------------------------------------------------------------
# SSH keys
id_rsa
id_ed25519
id_ecdsa
id_dsa
*.pem
*.key
*.p12
*.pfx
*.crt
*.cer
*.der

# TLS/SSL certificates (private keys only - public certs may be OK)
*.key
*.pem
!*.pub
!*.public

# Signing keys
*.signing.key
*.private.key

# ---------------------------------------------------------------------------
# Service Account Credentials (Section 7.1.2.6)
# ---------------------------------------------------------------------------
*service-account*.json
*service-account*.yaml
*service-account*.yml
*credentials*.json
*credentials*.yaml
*credentials*.yml

# ---------------------------------------------------------------------------
# Webhook Secrets (Section 7.1.2.7)
# ---------------------------------------------------------------------------
*webhook*secret*
*webhook*signing*
*hook*secret*

# ---------------------------------------------------------------------------
# Generated logs and caches that may contain secrets
# ---------------------------------------------------------------------------
*.log
!artifacts/pre-commit.log
*.cache
*.tmp

# ---------------------------------------------------------------------------
# Python
# ---------------------------------------------------------------------------

__pycache__/
*.py[cod]
*.pyo
*.egg-info/
.eggs/
.venv/
venv/
.env-venv/

# ---------------------------------------------------------------------------
# Pre-commit / tooling artifacts
# ---------------------------------------------------------------------------

# Local pre-commit caches (never commit)
.pre-commit-cache/
.precommit/

# AI / lint / CI artifacts (generated)
artifacts/
*.log

# ---------------------------------------------------------------------------
# OS / editor noise
# ---------------------------------------------------------------------------

.DS_Store
Thumbs.db

.vscode/
.idea/
*.swp
*.swo

# ---------------------------------------------------------------------------
# Build / runtime output
# ---------------------------------------------------------------------------

dist/
build/
out/
coverage/