You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
804 B
804 B
| date | title |
|---|---|
| 2026-03-28 | Secrets rotation checklist |
Rotate these secrets if they were stored in .env or otherwise exposed:
- OPENROUTER_API_KEY / OPENAI_API_KEY
- NPM_TOKEN
- DEPLOY SSH keys or passwords (DEPLOY_SSH_KEY, DEPLOY_PASSWORD)
- Any database credentials, API keys, or third-party service tokens
Steps
- Revoke the current tokens in each provider's dashboard.
- Create new tokens/keys and store them in the repository secrets (GitHub Settings → Secrets).
- Update any running services / CI variables to use the new tokens.
- If you used SSH keys and replaced them, update the authorized_keys on the VPS and remove the old key.
Verification
- Use CI dry-run jobs that check connectivity and token validity.
- Run local commands that use the new tokens.