diff --git a/.gitignore b/.gitignore
index 478cb2c..993b376 100644
--- a/.gitignore
+++ b/.gitignore
@@ -42,3 +42,6 @@ tests/e2e/*.local.config.ts
 
 # Claude Code session state (local-only)
 .claude/
+
+# Git credentials (written by DataHub agent tooling for auth; never commit)
+.git-credentials