diff --git a/.gitignore b/.gitignore
index 99db452..983bd23 100644
--- a/.gitignore
+++ b/.gitignore
@@ -8,6 +8,10 @@ app/build/
 local.properties
 .do-session
 
+# Secrets — never commit
+gh-token.txt
+*.token
+
 # Android Studio / IntelliJ
 .idea/
 *.iml