From deae0c1c0e93fa63e6f712a1a4497ad1d2fd0969 Mon Sep 17 00:00:00 2001
From: Nicholas Ellul <nicholas.ellul1@gmail.com>
Date: Wed, 10 Feb 2021 16:35:06 -0500
Subject: [PATCH] Put more emphasis on having .env in gitignore

---
 CHANGELOG.md            | 1 +
 docs/getting_started.md | 5 ++++-
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index bad7527a0..dc691f13c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -14,6 +14,7 @@ and adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.html).
 - Webhooks types are now exported outside the library [#91](https://github.com/shopify/shopify-node-api/pull/91)
 - Added support for private apps [#99](https://github.com/Shopify/shopify-node-api/pull/99)
 - `USER_AGENT_PREFIX` added to Context, to add agent to all requests [#101](https://github.com/Shopify/shopify-node-api/pull/101)
+- Add link to tutorial on how to rotate credentials if neccesary [#107](https://github.com/Shopify/shopify-node-api/pull/107)
 
 ### Fixed
 
diff --git a/docs/getting_started.md b/docs/getting_started.md
index 728809a10..6497566f1 100644
--- a/docs/getting_started.md
+++ b/docs/getting_started.md
@@ -45,13 +45,16 @@ src/
   index.ts
 ```
 
-If your application is in a Git repository, you should make sure to add these files to `.gitignore`:
+If your application is in a Git repository, you should **make sure to add these files to `.gitignore`**.
+
 ```
 .env
 dist
 node_modules
 ```
 
+ **Important:** If you ever accidentally commit your API secret to GitHub or any other third party, you can follow [this tutorial](https://shopify.dev/tutorials/rotate-revoke-api-credentials) on how to generate new credentials for your application.
+
 `tsconfig.json`
 ```json
 {