I'm working on a project mainly for a bit of fun.
I set up a twitter account and wrote a python script to write tweets.
Initially i hard-coded the twitter credentials for my app into my script (tweet.py)
Now i want to share the project so i have removed my app's credentials from tweet.py and added them to a config file. I have added the config file to .gitignore.
My question is, if someone forks my project, can they somehow checkout an old version of tweet.py which has the credentials? If so, what steps can i take to cover myself in this case?
Yes, anyone can see the old files in version history in git-hub free version. If you want to make your project secure, you have to pay for private repository in github.
If you dont wana pay, follow what @Stijin suggested.
Git security - private information in previous commits