title: Rails, Security risk of adding secrets.yml to Git?
body: <p>I've just started learning Ruby On Rails and have come across a course where the instructor emphasises that not adding /config/secrets.yml to .gitignore is a security risk when using GitHub (public repo).</p>
  
  <p>But when working through the established book <a href="https://pragprog.com/book/rails5/agile-web-development-with-rails-5" rel="nofollow noreferrer">"Agile Rails 5"</a> by Pragmatic Programmers they don't mention this at all, even when demonstrating adding the project to Git.</p>
  
  <p>So my question is:</p>
  
  <p>Does including this secrets.yml file expose some kind of security risk, if so how/why/what?</p>