@jonasgroendahl @Netlify If you want to avoid the code ever being somewhere public, you'd probably want to use a private code repo, which is totally viable.
Often though, you might find that there are just secrets in your code (auth creds etc) which you can abstract away into env variables.