never store sensitive data like API keys in a repository. Or you can do that but encrypt it so that nobody which can view your repo (even if it&#x27;s private) can use that data immediately. It&#x27;s like storing passwords in plaintext in a DB. Every (DB) admin will tell you: Don&#x27;t&#x2F;Never do that.<p>I&#x27;ve recently also have to do with this problems while doing server setup with a private repo. I&#x27;m using Ansible and Ansible Vault to encrypt sensitive data and the encryption key itself is only accessible (a password safe) to certain members of our team <a href="http:&#x2F;&#x2F;docs.ansible.com&#x2F;ansible&#x2F;playbooks_vault.html" rel="nofollow">http:&#x2F;&#x2F;docs.ansible.com&#x2F;ansible&#x2F;playbooks_vault.html</a>