From 8a5f24ceb9b7edea626309f20e31cd1030234828 Mon Sep 17 00:00:00 2001 From: Bruno Silva Date: Sat, 29 Aug 2026 22:48:06 -0300 Subject: [PATCH] security: remove committed MySQL credentials from tracking - Remove .kiro/settings/mcp.json (contained plaintext DB password) from git tracking and add it to .gitignore. - Add .kiro/settings/mcp.json.example as a template with placeholder values, so the local MCP config structure is still documented. Note: the credential was already exposed in git history on a public repo. This commit stops further exposure going forward, but does not remove it from past commits. The password must be rotated, and a history rewrite (git filter-repo/BFG) is recommended as a follow-up. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> --- .gitignore | 3 +++ .kiro/settings/{mcp.json => mcp.json.example} | 9 ++++----- 2 files changed, 7 insertions(+), 5 deletions(-) rename .kiro/settings/{mcp.json => mcp.json.example} (65%) diff --git a/.gitignore b/.gitignore index c2065bc..a19f768 100644 --- a/.gitignore +++ b/.gitignore @@ -35,3 +35,6 @@ out/ ### VS Code ### .vscode/ + +### Secrets / local tool configs ### +.kiro/settings/mcp.json diff --git a/.kiro/settings/mcp.json b/.kiro/settings/mcp.json.example similarity index 65% rename from .kiro/settings/mcp.json rename to .kiro/settings/mcp.json.example index 591d196..23b83e1 100644 --- a/.kiro/settings/mcp.json +++ b/.kiro/settings/mcp.json.example @@ -9,14 +9,13 @@ "env": { "MYSQL_HOST": "127.0.0.1", "MYSQL_PORT": "3306", - "MYSQL_USER": "financialbudgetuser", - "MYSQL_PASS": "cadI1fzFK3t#El%I", - "MYSQL_DB": "financialbudgetdb" + "MYSQL_USER": "CHANGE_ME", + "MYSQL_PASS": "CHANGE_ME", + "MYSQL_DB": "CHANGE_ME" }, "autoApprove": [ - "mysql_query", "mysql_query" ] } } -} \ No newline at end of file +}