How to keep the keystore file private on flutter? - flutter

I'm trying to deploying my flutter app to Google play store as a test. On this document, https://flutter.dev/docs/deployment/android, I think I need to store my keystone file private, but I'm not sure how to do it.
I'm completely a beginner to coding, so if someone can tell me how to make the file private, I want to know. I searched to make the keystone private, but could not find and I'm stuck now.

It simply means keep to yourself somewhere safe. Don't upload it on public git-repo or anywhere. If you lose it then you might not be able to update your application anymore. If you're keeping it inside the app's project folder then add it to the .gitignore file so that it don't get uploaded in public git repo. If you're using private repo then you're good to go.

Related

Using github and posting my own play store app

I don't know whether this question should have come in this platform or not but I wanted to ask that let us say I made a github repository which was public. Now another person who has no relation with me downloaded the code, edited it and posted it in play store. I found out that this app which is in play store was my one of the github repositories with some edit. So should I issue a copyright or something or is it fine I should not do anything?
PS: This hasn't happened with me in real. I was just having fear of my repository being used by other but I guess they are so bad that no one would like to use them. Another thing is that pls don't comment that you should make your repositories private.
Any help will be appreciated.
If you are making you repo public you yourself are permitting others to use it. But to prevent misuse of your code and work there are open source licenses available that you can add to your public repo that will put some restrictions on its usage.
More info can be found here:
https://docs.github.com/en/github/creating-cloning-and-archiving-repositories/licensing-a-repository
https://opensource.guide/legal/

Disable zip downloads from github

Is there any way to disable viewers to download my files from github?
I want to show my work, but I am afraid anybody can steal my code.
You can't, Github actually means you want to share something with the community, or you are showcasing your work in the open source community. Unfortunately you cannot restrict the users from downloading your content from your Repository.
Alternatively what you can do Just make your Repository private. But then in this case you are not able to make you work available to view for audience.
More you can read here :-
https://help.github.com/en/github/building-a-strong-community/limiting-interactions-in-your-repository
Disabling zip/tarballs on GitHub at the moment seems to be impossible, but it would be useful for those using git submodules, which are not included in the automatic created archives, where the repository owner could replace them with a continuous integration job with something like git-archive-all.

File encryption in Github

I’m a relative Github newbie. I’m developing a Python app which I’m holding in Github. Currently a private repo but will be public soon. The app holds config data in an ini file which includes various api credentials for the web services the app uses. I want to hold the ini file with the code in Github for ease of version control but need it to be encrypted. Not talking banking level encryption here - just want to avoid unauthorised people using my test web services credentials. What is the best/most transparent way of doing this? My devt environment is MS Visual Studio 2017. I’ve seen a number of plugins that enable encryption/decryption on the fly but don’t know how good/secure they are. Any recommendations?
You aren't in the right direction.
You can't hold both your credentials and who is using them in the same repository.
In this situation, you will always have to decrypt them, and anyone else will be able to put a breakpoint after the decryption and get them. Just as you can.
Of course there will be a case in which you send encrypted keys to another service that decrypt and uses them.
You have two options:
Hold your credentials in environment variables.
Remove your .ini file from git.
Pay attention!
Your credentials is now in the git history!
Even if you solve your problems, anyone can go back in the history and see what checked in today, for example.
There are ways to edit strings in history or to remove a file from history. Look for solutions on the Internet.
You can try the git-secret tool.

Unedited files not showing up in repository?

Very new to Github and I downloaded the desktop application in hopes of understanding it better. What I'm trying to do is commit/push files by dragging them into my repository folder, but they don't show in application when moved? I tried editing a txt file and as soon as I save it, it appears. I don't want to have to edit every file I add to my repository as I edit it elsewhere. How do I make the non-edited, dragged-and-dropped files appear?
Also, is there an official GitHub support forum? I can't find anything on their website where you can ask questions/etc and I'm not sure StackOverflow is the best place for this question.
Thanks!
That's the way how git works. It doesn't make sense to add every time the unedited files.
When it notices you added/edited/removed files, git will know that.
I pasted a file (blocks.gif) in my repository and in GitHub Desktop it I see the following (click the 1 uncommitted change) and you should see the new files there. Then you can write a commit message and commit the changes.
Also, is there an official GitHub support forum?
When you need help using GitHub, you can always contact the support team (or write an email to support#github.com). They are awesome people. :)
https://github.com/contact

How does one make a source folder project to be "public" in ProjectLocker?

When creating a new project in ProjectLocker, by default it makes the project private, and you have to explicitly add people to the project. What if you simply want to make the project public. Seems like you should be able to do it, but the UI is unclear.
All ProjectLocker repositories are private at this time. ProjectLcoker does not have a notion of a public project that people can access.