Build error due to sensitive data in .gitignore file

[luke]

Hi, @LauraLee. There is no way (that I know of) to protect secrets in client side javascript. The solution for this is typically to make the required API calls via Functions and store the private API keys in that environment.

There is a support guide about this here:

[Support Guide] How do I keep my API keys/tokens safe using Netlify Functions?

Last reviewed by Netlify Support on Oct 2023 With Jamstack sites, using API keys/tokens to make API calls to other services is a frequent pattern. In some cases, you may want to hard code the keys in your html, when invoking those API calls - which on a service like Netlify means these keys are now public. Anyone can open their browser dev tools and view them, and of course this can lead to someone abusing this access. In some cases, this is fine. For instance, some types of Firebase and Faun…