I'm planning on open sourcing my app but my codesigning keys are in a bash script in GitHub. I knew this was a bad idea but I originally intended on not opening up my app so it didn't matter (the repo is private). There's a git command to easily remove the file from all commits but I don't want to do this if unnecessary.
Is having the codesigning key (3rd Party Mac Developer Application: ()) in the public a problem? I'd hate to lose this script due to not having it stored in git.