Modernizing Git Configuration: XDG Directory Standards & Security Best Practices

[orue]

Has anyone faced challenges migrating from the traditional /.gitconfig to the XDG Base Directory (/.config/git/) layout—especially when it comes to maintaining strong security hygiene?
What tips, tools, or workflows have you used to keep sensitive information secure during migration and team onboarding?

https://github.com/orue/git-configuration/blob/main/README.md

For example:

How do you manage secrets, SSH keys, and global ignore files when centralizing configs under XDG?

What global ignore or security settings (e.g., object fsck, protocol rewrites) have you found effective to prevent accidental exposure of secrets during configuration changes?

Any cross-platform hurdles or compatibility gotchas?

Could you leverage additional tooling or automation to audit your configs for security best practices?

#security, #configuration, #xdg, #best-practices, #migratio