From 0bbfbbad5126fa03c9aeeebf8726a4200da2a955 Mon Sep 17 00:00:00 2001
From: Jens Caers <jens@itworx.tech>
Date: Mon, 31 Aug 2026 01:40:41 +0200
Subject: [PATCH] Harden local secret and workspace ignores

---
 .gitignore | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/.gitignore b/.gitignore
index 0ba1a3c..d2da572 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,9 +1,24 @@
 node_modules/
 dist/
 .DS_Store
+Thumbs.db
 *.log
 coverage/
 artifacts/
 playwright-report/
 .forgeflow/
 .playwright-mcp/
+.env
+.env.*
+!.env.example
+*.pfx
+*.p12
+*.key
+*.pem
+!build/update-signing-public.pem
+.codex/
+.claude/
+.agents/
+.dyad/
+.idea/
+.vs/