You shouldn&#x27;t be keeping api keys or other <i>sensitive</i> information in git <i>at all</i>. And please note -- if you do remove it from git, it will be available in your git history so that needs to be taken care of as well (should the repo ever become public -- a common &quot;exploit&quot;).