I trying to build a discord bot with nodejs. I made it and want to push it to github. But I dont want that the token be visible in code because of security risks.
Is there a way of putting the token in a somewhere out of code and use it?
>Solution :
Use an .env file that you add to your .gitignore, and add a .env.template file with the name of the variable so consumers would see what variables they need to set in the .env file (this file would be commited as an example). You will read that .env file by using a package such as dotenv.
You can read more about this in articles such as this one.