Live data from Hacker News

Show HN: I built an open source event-management system

github.com

31–32 of 32 posts

Re: Show HN: I built an open source event-management system

#31
post #16

Why on earth is this on front page?

Because people can show their side projects here. You might be really advanced and not impressed, that's fine. There's always that set of folks who are never impressed. I wish to see more Show HN. I like to see more folks building and less talking.

I'm not saying people should not show projects or doesn't belong here. I really like "Show HN" myself, but why did this particular project made to HN front page is what I don't understand.

Re: Show HN: I built an open source event-management system

#32

Looks like you committed a .env file previously with some semi-private details contained within it, plus you’ve hardcoded some Cloudinary API credentials. You may want to rotate them before they’re abused by someone. Edit: oh and some database credentials & getstream.io api credentials

made a little tool to catch these things https://github.com/zricethezav/gitleaks . working on a CI version of it right now as well. gotta protect those credentials. edit: ci version here - https://github.com/zricethezav/gitleaks-ci . work in progress, trying to add readme and instructions tonight. Also if anyone is interested in making gitleaks-ci into a paid github app... hmu

This is very cool! I built something very similar about a year back [0] -- yours looks like it supports some things that mine doesn't but that I've been wanting to add, such as providing the commit hash of the offending commit, which isn't something mine does due to the git diff parsing package I'm using.

[0]: https://github.com/ezekg/git-hound

Post reply on HN