Talked to a infosec savvy friend about this issue, and he responded that with a private repo via github, and directory listing disabled, the risk of information being retrieved from a .Git directory is low. However, looking through the responses here, I don't see any mention of this.
Without directory browsing, is it exorbitantly difficult to rebuild the contents of a .git folder from the known parts of a repo, eg, .Git/config, .Git/HEAD? I'm a novice when it comes to git, been relying on the github GUI, so I don't really know where to start.
Without directory browsing, is it exorbitantly difficult to rebuild the contents of a .git folder from the known parts of a repo, eg, .Git/config, .Git/HEAD? I'm a novice when it comes to git, been relying on the github GUI, so I don't really know where to start.
Thank you for any insight!