Have a secret in .gitignore /.ssh

[commjoen]

• Create a branch with added secret in .gitignore and a secret in .ssh
• Create the challenges for both where the secrets for both files are having their own separate challenge with encryption of the secrets to hide them from detection engines.

[ArslanYM]

Is this issue open ?

[commjoen]

Yes, @ArslanYM it is . Want to have a stab at it?

[ArslanYM]

Yes please. Thanks

[commjoen]

Welcome to the team @ArslanYM ! Please have a look at https://github.com/OWASP/wrongsecrets/blob/master/CONTRIBUTING.md for how to implement a challenge and the required tests :) . Feel free to reach out via Slack if you have any questions!

[ArslanYM]

Thanks @commjoen , Can you send me the slack link too.

[commjoen]

Need support? Contact us via OWASP Slack for which you sign up here

[ArslanYM]

@commjoen This will sound like a dumb question but how do I add a secret in .ssh?

[commjoen]

That does not sound like a dumb question at all! https://linuxize.com/post/using-the-ssh-config-file/?utm_content=cmp-true shows a nice example where the identity file mentioned would be the secret ;) .

[commjoen]

Hello @ArslanYM do you have any progress on this :) ?