So lets say I create a ASP.NET Core web API with database seeder that creates default accounts, admin account in the database. Of course I will not hard code the values and instead I initialize user secrets and put all the username and passwords in the secrets JSON file.
I just want to know from experienced devs how you guys handle sensitive data like this because I'm reading some devs push their sensitive data into the repo which lets just say they shouldn't do that. I'm just a beginner and wanna know if what im doing is right.