# How to push Node-Red to GitHub without revealing sensitive information?
**URL:** https://discourse.nodered.org/t/how-to-push-node-red-to-github-without-revealing-sensitive-information/49505
**Category:** General
**Created:** [9 August 2021 06:01 UTC](https://discourse.nodered.org/t/how-to-push-node-red-to-github-without-revealing-sensitive-information/49505 "2021-08-09T06:01:36Z")
**Posts on this page:** 8
**Page:** 1
### Author:  [@portfedh](https://discourse.nodered.org/u/portfedh)
#### Post date: [9 August 2021 06:01 UTC](https://discourse.nodered.org/t/how-to-push-node-red-to-github-without-revealing-sensitive-information/49505/1 "2021-08-09T06:01:36Z")
I would like to share my NodeRed Code in Github as part of an IOT project, however I would like to keep some of my data private (MQTT password, InfluxDB password, etc).
I could manually erase this information, but this would not be very practical, since I would have to do it every time I update the file.
In my python scripts I use os.environ.get to save my passwords and upload to GitHub securely.
¿Is there some way to set up Node-Red to easily push to GitHub without revealing sensitive information?
---
### Author:  [@Colin](https://discourse.nodered.org/u/Colin)
#### Post date: [9 August 2021 06:33 UTC](https://discourse.nodered.org/t/how-to-push-node-red-to-github-without-revealing-sensitive-information/49505/2 "2021-08-09T06:33:16Z")
You can configure them using environment variables in the node configuration. Then they do not exist in the flow. [Using environment variables : Node-RED](https://nodered.org/docs/user-guide/environment-variables)
---
### Author:  [@knolleary](https://discourse.nodered.org/u/knolleary)
#### Post date: [9 August 2021 08:56 UTC](https://discourse.nodered.org/t/how-to-push-node-red-to-github-without-revealing-sensitive-information/49505/3 "2021-08-09T08:56:31Z")
In case you weren't aware, all node credentials are kept in a separate file alongside your flow file. The credentials file is, by default, encrypted using the `credentialSecret` key in your settings file. As long as you keep that secret out of git, then your credentials will be protected.
---
### Author:  [@Colin](https://discourse.nodered.org/u/Colin)
#### Post date: [9 August 2021 08:59 UTC](https://discourse.nodered.org/t/how-to-push-node-red-to-github-without-revealing-sensitive-information/49505/4 "2021-08-09T08:59:43Z")
The credential secret can be picked up from an environment variable, so then you only need to set that up in the environment.
---
### Author:  [@hardillb](https://discourse.nodered.org/u/hardillb)
#### Post date: [9 August 2021 10:01 UTC](https://discourse.nodered.org/t/how-to-push-node-red-to-github-without-revealing-sensitive-information/49505/5 "2021-08-09T10:01:23Z")
Also cross posted and answered on Stack Overflow
>
---
### Author:  [@dceejay](https://discourse.nodered.org/u/dceejay)
#### Post date: [9 August 2021 10:33 UTC](https://discourse.nodered.org/t/how-to-push-node-red-to-github-without-revealing-sensitive-information/49505/6 "2021-08-09T10:33:53Z")
But do check that any 3rd party contrib nodes also store credentials correctly
---
### Author:  [@portfedh](https://discourse.nodered.org/u/portfedh)
#### Post date: [10 August 2021 02:51 UTC](https://discourse.nodered.org/t/how-to-push-node-red-to-github-without-revealing-sensitive-information/49505/7 "2021-08-10T02:51:40Z")
Thank you, this was very helpfull!
---
### Author:  [@system](https://discourse.nodered.org/u/system)
#### Post date: [24 August 2021 02:51 UTC](https://discourse.nodered.org/t/how-to-push-node-red-to-github-without-revealing-sensitive-information/49505/8 "2021-08-24T02:51:55Z")
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.